last executing test programs: 6.433643013s ago: executing program 3 (id=664): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = syz_io_uring_setup(0x92c, &(0x7f0000000340), &(0x7f0000000140), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x8, 0x20000000, 0x0) 6.390203566s ago: executing program 3 (id=666): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c7368a850a6402cb833f8e92d43d56d2077ac6f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x22}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600000001500000227bd", @ANYRES32=0x0, @ANYBLOB="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"], 0x60}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.997617819s ago: executing program 2 (id=674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) 4.27247742s ago: executing program 2 (id=695): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) unshare(0x22020400) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r6, &(0x7f00000000c0)=""/108, 0x6c) 4.197483116s ago: executing program 1 (id=696): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r0, &(0x7f0000002000)={0x2020}, 0x2020) 4.084254025s ago: executing program 1 (id=698): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00'}) 3.953279616s ago: executing program 1 (id=700): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x28000801) socket(0x0, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x7, 0x100000]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) 3.772931171s ago: executing program 4 (id=702): shmget(0x0, 0x1000, 0x0, &(0x7f0000016000/0x1000)=nil) 3.667034669s ago: executing program 4 (id=703): r0 = socket(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=""/4096, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d56549b, 0x0, [0xfffffffffffffffc]}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="00000000000000000000f4ff00ffffffffff00", 0x13}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x24000880) 3.365457914s ago: executing program 4 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.262729513s ago: executing program 4 (id=705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) 3.234557335s ago: executing program 2 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7ffd, 0x220108, 0x6, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) 3.077418858s ago: executing program 2 (id=707): r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = dup2(r0, r0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000380)='net/hci\x00') recvfrom$unix(r1, &(0x7f00000002c0)=""/177, 0xb1, 0x2002, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000003400)={0x1, 0x2, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x3, 0x3}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8], 0x38}}, 0x40804) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25150a00000a0014007770616e3100000008000100", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) 3.037329321s ago: executing program 3 (id=708): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) 3.015321963s ago: executing program 1 (id=709): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaa4c829bb2ef9aaaa0180c200000008004500001c58efc07200119078"], 0x0) syz_emit_ethernet(0x86, &(0x7f000000a100)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x594003, 0x0) memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x4a67, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}) io_uring_enter(r2, 0x7c76, 0x0, 0x0, 0x0, 0xffffffffffffff28) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) 2.80532672s ago: executing program 3 (id=710): syz_open_dev$MSR(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') umount2(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2.263133925s ago: executing program 3 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000e00)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.185520681s ago: executing program 0 (id=713): socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x625c, &(0x7f0000000340), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 2.115298417s ago: executing program 3 (id=714): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r5, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x46) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x42}, @rr={0x7, 0x3, 0x50}]}}, @echo}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/50, 0x32}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.009390615s ago: executing program 0 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.897386544s ago: executing program 4 (id=716): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 1.839756949s ago: executing program 0 (id=717): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000940), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04002820"], 0x7) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xc0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a80000810000000800450f"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000100)="4f8cad880499afeee309c3", 0xb, 0x4040800, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) 1.441436542s ago: executing program 2 (id=718): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = dup2(r0, r0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000380)='net/hci\x00') recvfrom$unix(r1, &(0x7f00000002c0)=""/177, 0xb1, 0x2002, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000003400)={0x1, 0x2, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x3, 0x3}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8], 0x38}}, 0x40804) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25150a00000a0014007770616e3100000008000100", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) 1.294339754s ago: executing program 4 (id=719): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c7368a850a6402cb833f8e92d43d56d2077ac6f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a9b893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c5452f42e09b388a14b22bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66cf8aeb1f98bd67bfd38ec2beac3ca99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94d81150c68ab27987655e1dd676ceef54ad4d663f88b6f82a65f7c94a0e40cbb782ff536bd67ba81125f8e0af199094b407f630dc6eb3b79615a4e63f75ab30b1e475748cb5dce6581dc92f740a21fb8dec725b4f2a0b0972f852504245d5ce11cfdead09c9b6e094261084cd20c2294525061a4638c0bfd08dfa70d24bf85d9cfd940e1a4f1509bed8233f22506e5b000000000000862a01def6c9e879a87688ad151c14ae7ff8a090aebe7e4f936c26e565ae96d38ee5f794468caa17419e22ff13df60a95596490358a3b8121511e427d619ad87fe998702ea0b659eff3f5cd8f4094fdd6b1d45facfe6629846170d99de670a9e72e21ed7363876612bf58a17142abccbbe4762f531067f92af24f5354f432ed1df74f8168d05de528f63a98bca22820439c567973de0077c068d1b70b6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x22}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600000001500000227bd", @ANYRES32=0x0, @ANYBLOB="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"], 0x60}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.007234087s ago: executing program 0 (id=720): socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x5247, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7ffd, 0x220108, 0x6, 0x1}, 0x48) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x3400, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000340)={r3, r4, r7, 0x0, 0x80000001}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8936, &(0x7f0000000000)={r9}) 663.017435ms ago: executing program 0 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003800)={0x1c, r1, 0xb0b95587b1db5461, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 323.174243ms ago: executing program 0 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r6 = fcntl$getown(r5, 0x9) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r6, &(0x7f0000000340), 0x4003) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000500)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x5bb8, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r7, 0xfffffdfc, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 25.096798ms ago: executing program 1 (id=723): syz_open_dev$dri(0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) clock_gettime(0x0, &(0x7f0000000200)) 24.771918ms ago: executing program 1 (id=724): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 2 (id=725): syz_open_dev$MSR(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') umount2(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): TU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.849850][ T4224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.876026][ T4224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.892437][ T4224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.952469][ T4224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.965725][ T3880] Bluetooth: hci7: command 0x040f tx timeout [ 115.031972][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.102956][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.122333][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.162898][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.197240][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.210708][ T4224] device hsr_slave_0 entered promiscuous mode [ 115.229362][ T4224] device hsr_slave_1 entered promiscuous mode [ 115.250288][ T4224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.271395][ T4224] Cannot create hsr debugfs directory [ 115.383749][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.391904][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.496858][ T4292] loop3: detected capacity change from 0 to 128 [ 115.505502][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.745162][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.784119][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.843165][ T4292] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038 (0x7fffffff) [ 115.863839][ T4292] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 115.944471][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.092564][ T3880] Bluetooth: hci2: command 0x040f tx timeout [ 116.486231][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.063210][ T3880] Bluetooth: hci7: command 0x0419 tx timeout [ 117.090256][ T4319] loop3: detected capacity change from 0 to 512 [ 117.207411][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 117.242610][ T4319] ext4 filesystem being mounted at /55/bus supports timestamps until 2038 (0x7fffffff) [ 117.248921][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.918182][ T4338] usb usb9: usbfs: process 4338 (syz.3.204) did not claim interface 0 before use [ 118.174315][ T3884] Bluetooth: hci2: command 0x0419 tx timeout [ 118.829568][ T4364] loop3: detected capacity change from 0 to 128 [ 118.954378][ T4364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.022654][ T4364] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038 (0x7fffffff) [ 119.094645][ T4364] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 119.744867][ T4393] syz.3.220 uses obsolete (PF_INET,SOCK_PACKET) [ 120.555000][ T4207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.634924][ T4207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.705039][ T4207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.743413][ T4423] syz.3.229 (4423) used greatest stack depth: 19616 bytes left [ 120.758473][ T4224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.956162][ T4207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.975884][ T4224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.083211][ T4434] loop1: detected capacity change from 0 to 131072 [ 122.164259][ T4224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.194011][ T4224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.230755][ T4434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.297768][ T4434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.616030][ T4207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.699833][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.713192][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.725626][ T4207] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.806244][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.816364][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.843466][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.850592][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.883096][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.906776][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.925906][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.933099][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.979955][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.000738][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.050076][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.084154][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.106473][ T4224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.126551][ T4468] loop3: detected capacity change from 0 to 2048 [ 123.230895][ T4468] NILFS (loop3): invalid segment: Sequence number mismatch [ 123.263136][ T4468] NILFS (loop3): trying rollback from an earlier position [ 123.291601][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.303729][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.333529][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.342055][ T4468] NILFS (loop3): recovery complete [ 123.349399][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.364772][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.365527][ T4477] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.413488][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.422271][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.438343][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.556275][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.573195][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.604627][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.627962][ T4224] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.732916][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.741945][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.771500][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.778677][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.807849][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.819439][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.837201][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.844482][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.068345][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.078628][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.104084][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.125941][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.136664][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.165630][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.174579][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.182152][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.207868][ T4207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.282157][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.296708][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.313471][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.324482][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.362583][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.372075][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.419203][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.473118][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.482028][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.758872][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.773300][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.804938][ T4207] device veth0_vlan entered promiscuous mode [ 124.855332][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.870436][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.985817][ T9] device hsr_slave_0 left promiscuous mode [ 125.192497][ T9] device hsr_slave_1 left promiscuous mode [ 125.284630][ T4499] Invalid ELF header magic: != ELF [ 126.036603][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 126.091334][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.109464][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.158646][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.172544][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.195526][ T9] device bridge_slave_1 left promiscuous mode [ 126.203707][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.328581][ T9] device bridge_slave_0 left promiscuous mode [ 126.369567][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.538145][ T9] device hsr_slave_0 left promiscuous mode [ 126.648913][ T9] device hsr_slave_1 left promiscuous mode [ 126.663069][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.672673][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.704739][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.712235][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.764621][ T9] device bridge_slave_1 left promiscuous mode [ 126.774354][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.803850][ T9] device bridge_slave_0 left promiscuous mode [ 126.812560][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.849461][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.859727][ T9] device veth1_macvtap left promiscuous mode [ 126.871581][ T9] device veth0_macvtap left promiscuous mode [ 126.889098][ T9] device veth1_vlan left promiscuous mode [ 126.904648][ T9] device veth0_vlan left promiscuous mode [ 126.948180][ T9] device veth1_macvtap left promiscuous mode [ 126.961151][ T9] device veth0_macvtap left promiscuous mode [ 126.976501][ T9] device veth1_vlan left promiscuous mode [ 126.988072][ T9] device veth0_vlan left promiscuous mode [ 127.112643][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 127.202698][ T3545] Bluetooth: hci3: command 0x0409 tx timeout [ 127.247331][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 127.265926][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.296380][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.329881][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.362131][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.386576][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.403607][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.692970][ T7] usb 2-1: usb_control_msg returned -32 [ 127.699782][ T7] usbtmc 2-1:16.0: can't read capabilities [ 128.047900][ T9] team0 (unregistering): Port device team_slave_1 removed [ 128.075455][ T9] team0 (unregistering): Port device team_slave_0 removed [ 128.112897][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.172143][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.225621][ T4517] xt_NFQUEUE: number of total queues is 0 [ 128.441936][ T9] bond0 (unregistering): Released all slaves [ 128.803803][ T9] team0 (unregistering): Port device team_slave_1 removed [ 128.847140][ T9] team0 (unregistering): Port device team_slave_0 removed [ 128.882989][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.922812][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.148716][ T9] bond0 (unregistering): Released all slaves [ 129.282863][ T3545] Bluetooth: hci3: command 0x041b tx timeout [ 129.409457][ T4207] device veth1_vlan entered promiscuous mode [ 129.550246][ T4224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.562655][ T3546] usb 2-1: USB disconnect, device number 2 [ 129.589347][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.612886][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.785400][ T4207] device veth0_macvtap entered promiscuous mode [ 129.823386][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.842532][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.851528][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.978280][ T4207] device veth1_macvtap entered promiscuous mode [ 130.058397][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.115169][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.127285][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.138206][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.148609][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.159402][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.171657][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.182527][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.192793][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.203457][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.216277][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.313998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.338236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.347279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.361942][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.386391][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.396982][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.411550][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.422544][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.442383][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.452239][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.463479][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.465780][ T1052] block nbd1: Attempted send on invalid socket [ 130.474304][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.482070][ T1052] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.491735][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.507821][ T4536] qnx6: unable to read the first superblock [ 130.519378][ T1052] block nbd1: Attempted send on invalid socket [ 130.525671][ T1052] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.537396][ T4536] qnx6: unable to read the first superblock [ 130.543694][ T4536] qnx6: unable to read the first superblock [ 130.571312][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.585704][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.615239][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.672175][ T4207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.694771][ T4207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.732488][ T4207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.741801][ T4207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.792422][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.801316][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.823828][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 131.016958][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.031786][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.053732][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.061642][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.170373][ T4224] device veth0_vlan entered promiscuous mode [ 131.295589][ T4224] device veth1_vlan entered promiscuous mode [ 131.373955][ T3884] Bluetooth: hci3: command 0x040f tx timeout [ 131.581819][ T4224] device veth0_macvtap entered promiscuous mode [ 131.596823][ T4224] device veth1_macvtap entered promiscuous mode [ 131.637544][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.658708][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.673290][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.694116][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.720582][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.734586][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.752644][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.792380][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.802251][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.827033][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.849361][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.871328][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.884727][ T4224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.892211][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.904531][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.926700][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.944930][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.963365][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.980119][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.997222][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.016551][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.039087][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.047902][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.062038][ T4496] device bridge_slave_0 entered promiscuous mode [ 132.158595][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.169706][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.180270][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.191182][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.201605][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.213371][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.225236][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.236215][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.247935][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.269146][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.289509][ T4224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.310424][ T4224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.341387][ T4224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.362677][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.369770][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.403893][ T4496] device bridge_slave_1 entered promiscuous mode [ 132.504616][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.523670][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.554763][ T4224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.592436][ T4224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.601216][ T4224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.622445][ T4224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.664380][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.682512][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.707000][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.759523][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.774600][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.889153][ T4496] team0: Port device team_slave_0 added [ 132.895240][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895309][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.976070][ T4496] team0: Port device team_slave_1 added [ 133.028026][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.053100][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.068010][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.098753][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.111145][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.180480][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.214852][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.221838][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.292482][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.443141][ T3884] Bluetooth: hci3: command 0x0419 tx timeout [ 133.520389][ T4496] device hsr_slave_0 entered promiscuous mode [ 133.579785][ T4496] device hsr_slave_1 entered promiscuous mode [ 133.640776][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.679129][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.721947][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.939306][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.991141][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.079692][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.232821][ T4570] loop4: detected capacity change from 0 to 64 [ 134.384255][ T4570] hfs: uid requires an argument [ 134.394788][ T4570] hfs: unable to parse mount options [ 134.816932][ T4496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.910268][ T4496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.155192][ T4496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.253724][ T3559] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.285530][ T4496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.556444][ T4588] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 135.640246][ T4591] loop3: detected capacity change from 0 to 128 [ 135.647323][ T3559] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.663794][ T4496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.682541][ T3559] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.721584][ T3559] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 135.725225][ T4496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.742240][ T3559] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.770776][ T3559] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.816395][ T4496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.825784][ T4591] FAT-fs (loop3): Unrecognized mount option "vfat" or missing value [ 135.882521][ T4496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.986658][ T3559] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.006013][ T3559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.030217][ T4591] loop3: detected capacity change from 0 to 256 [ 136.062395][ T3559] usb 5-1: Product: syz [ 136.066618][ T3559] usb 5-1: Manufacturer: syz [ 136.101857][ T3559] usb 5-1: SerialNumber: syz [ 136.255757][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.093973][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.102007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.117906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.268938][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.277406][ T3559] cdc_ncm 5-1:1.0: bind() failure [ 137.288604][ T3559] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.303131][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.311835][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.318985][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.367368][ T3559] cdc_ncm 5-1:1.1: bind() failure [ 137.389062][ T4614] loop1: detected capacity change from 0 to 512 [ 137.413254][ T3559] usb 5-1: USB disconnect, device number 2 [ 137.442844][ T4615] kvm: emulating exchange as write [ 137.450007][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.478379][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.513319][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.520448][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.578787][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.647334][ T4614] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 137.684547][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.692856][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.702031][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.743253][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.767385][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.828594][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.841527][ T4627] loop0: detected capacity change from 0 to 1024 [ 137.864749][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.891506][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.899774][ T4627] EXT4-fs (loop0): Ignoring removed orlov option [ 137.913581][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.925280][ T4629] loop4: detected capacity change from 0 to 2048 [ 137.938905][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.959560][ T4627] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 137.987047][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.003549][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.025102][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.053528][ T4629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.639803][ T3884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.854580][ T4652] loop4: detected capacity change from 0 to 64 [ 139.864742][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.881811][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.892717][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.942654][ T3884] usb 1-1: Using ep0 maxpacket: 32 [ 139.948477][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.958871][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.073295][ T3884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.115916][ T3884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.156849][ T3884] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.192505][ T3884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.229980][ T3884] usb 1-1: config 0 descriptor?? [ 140.280732][ T4496] device veth0_vlan entered promiscuous mode [ 140.304716][ T3884] hub 1-1:0.0: USB hub found [ 140.324077][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.334274][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.393193][ T4657] loop3: detected capacity change from 0 to 256 [ 140.404308][ T4496] device veth1_vlan entered promiscuous mode [ 140.412081][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.425047][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.464087][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.518238][ T3884] hub 1-1:0.0: 1 port detected [ 140.732820][ T3884] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 140.740783][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.762748][ T3884] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 140.783808][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.804564][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.829743][ T4496] device veth0_macvtap entered promiscuous mode [ 140.855082][ T4496] device veth1_macvtap entered promiscuous mode [ 140.892947][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.911778][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.920433][ T3884] usbhid 1-1:0.0: can't add hid device: -71 [ 140.927720][ T3884] usbhid: probe of 1-1:0.0 failed with error -71 [ 140.943168][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.973283][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.985974][ T3884] usb 1-1: USB disconnect, device number 2 [ 141.013733][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.035272][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.062865][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.083812][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.105172][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.140716][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.172400][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.192382][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.212442][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.243106][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.272642][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.322501][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.359138][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.389468][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.420712][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.454100][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.474996][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.505464][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.511100][ T4661] loop4: detected capacity change from 0 to 32768 [ 141.526231][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.546176][ T4665] loop0: detected capacity change from 0 to 8192 [ 141.552830][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.565428][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.578056][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.589052][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.599695][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.611157][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.621611][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.632768][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.644702][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.655780][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.685060][ T4663] loop3: detected capacity change from 0 to 32768 [ 141.685088][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.713255][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.722175][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.743715][ T4496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.754239][ T4496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.764579][ T4496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.774620][ T4496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.781879][ T4663] XFS: ikeep mount option is deprecated. [ 141.784935][ T4661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.287 (4661) [ 141.877719][ T4663] XFS (loop3): Mounting V5 Filesystem [ 141.951031][ T4661] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 141.962575][ T4661] BTRFS info (device loop4): setting nodatacow, compression disabled [ 141.992958][ T4661] BTRFS info (device loop4): enabling auto defrag [ 141.999470][ T4661] BTRFS info (device loop4): max_inline at 0 [ 142.104290][ T4661] BTRFS info (device loop4): using free space tree [ 142.111187][ T4661] BTRFS info (device loop4): has skinny extents [ 142.113475][ T4663] XFS (loop3): Ending clean mount [ 142.155950][ T4663] XFS (loop3): Quotacheck needed: Please wait. [ 142.214225][ T4687] loop0: detected capacity change from 0 to 1024 [ 142.251322][ T4687] EXT4-fs (loop0): Ignoring removed orlov option [ 142.299613][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 142.328858][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.358331][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.363581][ T4663] XFS (loop3): Quotacheck: Done. [ 142.368287][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.383634][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.415116][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.627739][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.638084][ T3505] XFS (loop3): Unmounting Filesystem [ 143.162439][ T3548] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.402504][ T3548] usb 3-1: Using ep0 maxpacket: 8 [ 143.522583][ T4702] loop0: detected capacity change from 0 to 32768 [ 143.651627][ T4702] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.292 (4702) [ 143.693431][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 143.767466][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.946703][ T3548] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.072093][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 144.215850][ T3548] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 144.472511][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.495973][ T4702] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 144.543201][ T3548] usb 3-1: config 0 descriptor?? [ 144.587979][ T4702] BTRFS info (device loop0): using free space tree [ 144.632494][ T4702] BTRFS info (device loop0): has skinny extents [ 144.669492][ T4725] loop4: detected capacity change from 0 to 512 [ 144.802957][ T3548] usb 3-1: USB disconnect, device number 3 [ 144.887347][ T4725] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.294: invalid indirect mapped block 256 (level 2) [ 145.020115][ T4725] EXT4-fs (loop4): 2 truncates cleaned up [ 145.053784][ T4702] BTRFS info (device loop0): enabling ssd optimizations [ 145.061555][ T4725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.265395][ T4725] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.285846][ T4725] overlayfs: failed to set xattr on upper [ 145.305712][ T4725] overlayfs: ...falling back to index=off,metacopy=off. [ 146.102058][ T4744] loop3: detected capacity change from 0 to 32768 [ 146.206103][ T4744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.297 (4744) [ 146.334043][ T4744] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 146.373206][ T4744] BTRFS info (device loop3): setting nodatacow, compression disabled [ 146.396621][ T4744] BTRFS info (device loop3): enabling auto defrag [ 146.420636][ T4744] BTRFS info (device loop3): max_inline at 0 [ 146.437278][ T4744] BTRFS info (device loop3): using free space tree [ 146.464525][ T4744] BTRFS info (device loop3): has skinny extents [ 146.710071][ T4762] loop2: detected capacity change from 0 to 32768 [ 146.823414][ T4762] XFS: ikeep mount option is deprecated. [ 146.936330][ T4762] XFS (loop2): Mounting V5 Filesystem [ 147.089924][ T4762] XFS (loop2): Ending clean mount [ 147.104475][ T4762] XFS (loop2): Quotacheck needed: Please wait. [ 147.299580][ T4762] XFS (loop2): Quotacheck: Done. [ 147.477984][ T4772] chnl_net:caif_netlink_parms(): no params data found [ 147.599745][ T4807] loop1: detected capacity change from 0 to 2048 [ 147.646257][ T4807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.673529][ T4496] XFS (loop2): Unmounting Filesystem [ 147.961594][ T4819] loop3: detected capacity change from 0 to 2048 [ 148.013104][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.013174][ T4820] loop0: detected capacity change from 0 to 4096 [ 148.020209][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.033301][ T4772] device bridge_slave_0 entered promiscuous mode [ 148.054401][ T4819] UDF-fs: bad mount option "ÿÿÿÿ00000000000000000000ÿ" or missing value [ 148.073450][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.083272][ T4820] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 148.098880][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.108450][ T4772] device bridge_slave_1 entered promiscuous mode [ 148.139616][ T4820] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 148.220502][ T4819] loop3: detected capacity change from 0 to 128 [ 148.270218][ T4772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.293278][ T4819] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 148.318997][ T4772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.336741][ T4819] sysv_free_block: trying to free block not in datazone [ 148.365222][ T4819] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 148.518238][ T4772] team0: Port device team_slave_0 added [ 148.587813][ T4772] team0: Port device team_slave_1 added [ 148.695827][ T9] device hsr_slave_0 left promiscuous mode [ 148.715542][ T9] device hsr_slave_1 left promiscuous mode [ 148.747292][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.783436][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.803018][ T2924] Bluetooth: hci0: command 0x0409 tx timeout [ 148.894542][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.902035][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.954919][ T9] device bridge_slave_1 left promiscuous mode [ 148.961193][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.000175][ T4843] loop2: detected capacity change from 0 to 2048 [ 149.034146][ T9] device bridge_slave_0 left promiscuous mode [ 149.059241][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.082661][ T4843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.148968][ T9] device hsr_slave_0 left promiscuous mode [ 149.165172][ T9] device hsr_slave_1 left promiscuous mode [ 149.188816][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.214202][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.242125][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.272520][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.303220][ T9] device bridge_slave_1 left promiscuous mode [ 149.309569][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.331123][ T9] device bridge_slave_0 left promiscuous mode [ 149.348328][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.375653][ T9] device hsr_slave_0 left promiscuous mode [ 149.392823][ T9] device hsr_slave_1 left promiscuous mode [ 149.412821][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.420907][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.440668][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.458748][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.479036][ T9] device bridge_slave_1 left promiscuous mode [ 149.492624][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.521432][ T9] device bridge_slave_0 left promiscuous mode [ 149.533072][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.551078][ T3793] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 149.568394][ T4207] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 149.592000][ T9] device veth1_macvtap left promiscuous mode [ 149.609348][ T9] device veth0_macvtap left promiscuous mode [ 149.625894][ T9] device veth1_vlan left promiscuous mode [ 149.632017][ T9] device veth0_vlan left promiscuous mode [ 149.691497][ T9] device veth1_macvtap left promiscuous mode [ 149.700320][ T9] device veth0_macvtap left promiscuous mode [ 149.715228][ T9] device veth1_vlan left promiscuous mode [ 149.725993][ T9] device veth0_vlan left promiscuous mode [ 149.736402][ T9] device veth1_macvtap left promiscuous mode [ 149.742895][ T9] device veth0_macvtap left promiscuous mode [ 149.749099][ T9] device veth1_vlan left promiscuous mode [ 149.755160][ T9] device veth0_vlan left promiscuous mode [ 150.776684][ T9] team0 (unregistering): Port device team_slave_1 removed [ 150.799127][ T9] team0 (unregistering): Port device team_slave_0 removed [ 150.817221][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.834950][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.886237][ T3554] Bluetooth: hci0: command 0x041b tx timeout [ 150.949780][ T9] bond0 (unregistering): Released all slaves [ 151.176109][ T9] team0 (unregistering): Port device team_slave_1 removed [ 151.196253][ T9] team0 (unregistering): Port device team_slave_0 removed [ 151.213010][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.228840][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.310464][ T9] bond0 (unregistering): Released all slaves [ 151.446678][ T9] team0 (unregistering): Port device team_slave_1 removed [ 151.465679][ T9] team0 (unregistering): Port device team_slave_0 removed [ 151.483587][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.499837][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.585300][ T9] bond0 (unregistering): Released all slaves [ 151.723838][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.732627][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.758732][ T4772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.799804][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.807433][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.833770][ T4772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.992638][ T4864] loop0: detected capacity change from 0 to 2048 [ 152.019273][ T4772] device hsr_slave_0 entered promiscuous mode [ 152.041960][ T4772] device hsr_slave_1 entered promiscuous mode [ 152.064047][ T4772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.071875][ T4772] Cannot create hsr debugfs directory [ 152.085097][ T4864] UDF-fs: bad mount option "ÿÿÿÿ00000000000000000000ÿ" or missing value [ 152.229483][ T4864] loop0: detected capacity change from 0 to 128 [ 152.408281][ T4864] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 152.417049][ T4772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.417196][ T4864] sysv_free_block: trying to free block not in datazone [ 152.444407][ T4864] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 152.521420][ T4772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.631767][ T4772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.703584][ T4871] chnl_net:caif_netlink_parms(): no params data found [ 152.800897][ T4772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.962662][ T4707] Bluetooth: hci0: command 0x040f tx timeout [ 153.010195][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.023411][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.040350][ T4871] device bridge_slave_0 entered promiscuous mode [ 153.106822][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.142620][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.151091][ T4871] device bridge_slave_1 entered promiscuous mode [ 153.221101][ T4871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.245007][ T4772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.274571][ T4871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.305166][ T4772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.403494][ T4772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.431508][ T4871] team0: Port device team_slave_0 added [ 153.456328][ T4871] team0: Port device team_slave_1 added [ 153.489118][ T4772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.543226][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.550239][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.585306][ T4871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.617183][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.624400][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.678950][ T4890] loop2: detected capacity change from 0 to 2048 [ 153.685562][ T4871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.761270][ T4890] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.816462][ T4871] device hsr_slave_0 entered promiscuous mode [ 153.852842][ T4871] device hsr_slave_1 entered promiscuous mode [ 153.859880][ T4871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.869704][ T4871] Cannot create hsr debugfs directory [ 154.283681][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.323746][ T3554] Bluetooth: hci1: command 0x0409 tx timeout [ 154.362731][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.383592][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.437086][ T4871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.469158][ T4772] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.486181][ T4883] chnl_net:caif_netlink_parms(): no params data found [ 154.513174][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.538352][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.555745][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.562921][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.602863][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.632988][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.642066][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.649214][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.687679][ T4871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.733877][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.798120][ T4871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.877295][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.903645][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.933091][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.011428][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.052817][ T3559] Bluetooth: hci0: command 0x0419 tx timeout [ 155.075917][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.113349][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.123444][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.143495][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.152859][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.161803][ T2924] Bluetooth: hci2: command 0x0409 tx timeout [ 155.172971][ T4871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.216755][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.239913][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.297975][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.305214][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.322092][ T4883] device bridge_slave_0 entered promiscuous mode [ 155.363483][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.434180][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.442854][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.514464][ T4883] device bridge_slave_1 entered promiscuous mode [ 155.529172][ T4871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.674252][ T4871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.704932][ T4883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.735539][ T4883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.769393][ T4871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.897969][ T4871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.916866][ T4883] team0: Port device team_slave_0 added [ 155.952718][ T4883] team0: Port device team_slave_1 added [ 155.989716][ T4922] loop1: detected capacity change from 0 to 2048 [ 156.070339][ T4922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.093851][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.103616][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.176903][ T4883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.217406][ T4772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.246681][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.260098][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.306012][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.317410][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.392587][ T4883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.402576][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 156.587714][ T4883] device hsr_slave_0 entered promiscuous mode [ 156.653737][ T4883] device hsr_slave_1 entered promiscuous mode [ 156.680443][ T4883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.710792][ T4883] Cannot create hsr debugfs directory [ 156.878527][ T4938] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 156.889170][ T4871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.006633][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.015809][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.035631][ T4871] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.047569][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.065525][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.151848][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.162432][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.180141][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.187415][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.195981][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.213069][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.214028][ T4714] Bluetooth: hci2: command 0x041b tx timeout [ 157.230988][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.238161][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.296345][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.309330][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.330641][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.357816][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.381645][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.399961][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.421349][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.459558][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.471212][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.480544][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.519595][ T4883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.530284][ T4950] loop1: detected capacity change from 0 to 2048 [ 157.562400][ T4772] device veth0_vlan entered promiscuous mode [ 157.576504][ T4871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.588165][ T4871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.612174][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.621079][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.627686][ T4950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.630401][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.646658][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.656262][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.673089][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.688360][ T4772] device veth1_vlan entered promiscuous mode [ 157.722040][ T4883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.752005][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.773872][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.828433][ T4883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.940159][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.950986][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.993466][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.024247][ T4772] device veth0_macvtap entered promiscuous mode [ 158.072046][ T4883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.100733][ T4772] device veth1_macvtap entered promiscuous mode [ 158.159053][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.170331][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.178793][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.200033][ T4871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.219616][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.233029][ T4967] loop1: detected capacity change from 0 to 1024 [ 158.237956][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.251012][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.265648][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.276301][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.286903][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.296877][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.307592][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.317470][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.336513][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.350477][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.369675][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.380642][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.387652][ T4967] EXT4-fs (loop1): Ignoring removed orlov option [ 158.403406][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.427859][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.448767][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.465301][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.476241][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.487829][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.497973][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.499056][ T4967] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 158.509061][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.543113][ T4712] Bluetooth: hci1: command 0x040f tx timeout [ 158.548145][ T4772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.561611][ T4772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.574097][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.606097][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.615392][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.624632][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.635144][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.647422][ T4772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.661148][ T4772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.670374][ T4772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.679754][ T4772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.718764][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.728211][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.756560][ T4871] device veth0_vlan entered promiscuous mode [ 158.790175][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.801260][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.839665][ T4871] device veth1_vlan entered promiscuous mode [ 158.877065][ T4883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.950443][ T4975] loop2: detected capacity change from 0 to 2048 [ 159.038233][ T4883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.056450][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.065359][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.075933][ T4975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.151844][ T4883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.171446][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.191897][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.212664][ T4871] device veth0_macvtap entered promiscuous mode [ 159.224713][ T4883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.251970][ T4871] device veth1_macvtap entered promiscuous mode [ 159.305093][ T3595] Bluetooth: hci2: command 0x040f tx timeout [ 159.315399][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.332854][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.407535][ T4987] loop2: detected capacity change from 0 to 1024 [ 159.416848][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.428862][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.441006][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.455281][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.465432][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.475953][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.486018][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.496824][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.507547][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.518219][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.528349][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.538922][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.550475][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.560124][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.569141][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.581046][ T4987] EXT4-fs (loop2): Ignoring removed orlov option [ 159.590999][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.606000][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.615877][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.637416][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.649070][ T4987] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 159.708941][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.733602][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.751266][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.766093][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.777661][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.789231][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.799932][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.810080][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.820693][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.850026][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.876044][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.910037][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.035450][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.040059][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.052260][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.063201][ T5006] loop2: detected capacity change from 0 to 2048 [ 160.063728][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.088697][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.106984][ T4871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.126253][ T4871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.138249][ T4871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.145230][ T5006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.149251][ T4871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.408727][ T4883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.561700][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.573270][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.615147][ T4883] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.623603][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.633632][ T4716] Bluetooth: hci1: command 0x0419 tx timeout [ 160.654933][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.768534][ T5022] loop1: detected capacity change from 0 to 1024 [ 160.789948][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.808310][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.819964][ T5022] EXT4-fs (loop1): Ignoring removed orlov option [ 160.858178][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 160.858501][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.918580][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.925739][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.934123][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.943333][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.951829][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.959004][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.980834][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.990915][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.000240][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.023125][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.052258][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.068040][ T5027] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 161.165228][ T5028] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 161.209476][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.221960][ T5024] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 161.352738][ T3595] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.363800][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.382746][ T4718] Bluetooth: hci2: command 0x0419 tx timeout [ 161.395239][ T5027] syz.4.386 (5027) used greatest stack depth: 19320 bytes left [ 161.407103][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.453822][ T5038] loop3: detected capacity change from 0 to 4096 [ 161.480879][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.490871][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.498295][ T5038] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 161.543469][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.560750][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.571026][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.579737][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.589803][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.602913][ T3595] usb 3-1: Using ep0 maxpacket: 8 [ 161.620103][ T5038] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.675818][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.752874][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 161.772391][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.792511][ T3595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.809288][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 161.829672][ T3595] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 161.865429][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.896754][ T3595] usb 3-1: config 0 descriptor?? [ 162.001226][ T5055] loop4: detected capacity change from 0 to 1024 [ 162.105925][ T5055] EXT4-fs (loop4): Ignoring removed orlov option [ 162.149396][ T4716] usb 3-1: USB disconnect, device number 4 [ 162.161017][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.176340][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.184800][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 162.219097][ T4883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.366470][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.376457][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.480352][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.493675][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.550954][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.564405][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.600353][ T4883] device veth0_vlan entered promiscuous mode [ 162.761576][ T4883] device veth1_vlan entered promiscuous mode [ 162.866812][ T5075] loop4: detected capacity change from 0 to 2048 [ 162.885136][ T3765] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 162.915197][ T4871] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 162.927211][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.953675][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.986038][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.998376][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.999577][ T5075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.027574][ T4883] device veth0_macvtap entered promiscuous mode [ 163.060932][ T4883] device veth1_macvtap entered promiscuous mode [ 163.146396][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.185640][ T5083] loop1: detected capacity change from 0 to 1024 [ 163.192103][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.212012][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.244482][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.254897][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.274296][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.280713][ T5089] Zero length message leads to an empty skb [ 163.292645][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.311910][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.322270][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.342533][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.353181][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.365951][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.377608][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.388421][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.400362][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.423032][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.431348][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.462917][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.475180][ T5083] EXT4-fs (loop1): Ignoring removed orlov option [ 163.490342][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.521905][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.550891][ T5083] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 163.577475][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.614728][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.668533][ T5106] loop2: detected capacity change from 0 to 4096 [ 163.679809][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.704977][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.760395][ T5106] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 163.792793][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.820751][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.847665][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.853702][ T5106] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 163.871737][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.882668][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.933297][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.944848][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.954957][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.966880][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.993017][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.000899][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.043458][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.146225][ T4883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.166252][ T5110] loop1: detected capacity change from 0 to 2048 [ 164.167667][ T4883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.181400][ T4883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.222796][ T4883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.287472][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 164.297927][ T5110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.346219][ T9] device hsr_slave_0 left promiscuous mode [ 164.373348][ T9] device hsr_slave_1 left promiscuous mode [ 164.406479][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.426427][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.461642][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.589441][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.630315][ T9] device bridge_slave_1 left promiscuous mode [ 164.663304][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.691241][ T9] device bridge_slave_0 left promiscuous mode [ 164.718752][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.788337][ T9] device hsr_slave_0 left promiscuous mode [ 164.813312][ T9] device hsr_slave_1 left promiscuous mode [ 164.833220][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.894028][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.913769][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.923878][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.934491][ T9] device bridge_slave_1 left promiscuous mode [ 164.940787][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.950433][ T9] device bridge_slave_0 left promiscuous mode [ 164.968716][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.023468][ T3654] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 165.030502][ T9] device hsr_slave_0 left promiscuous mode [ 165.034719][ T4496] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 165.045905][ T9] device hsr_slave_1 left promiscuous mode [ 165.066762][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.083177][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.110100][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.153240][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.181501][ T5127] loop3: detected capacity change from 0 to 1024 [ 165.191003][ T9] device bridge_slave_1 left promiscuous mode [ 165.197929][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.207655][ T9] device bridge_slave_0 left promiscuous mode [ 165.222917][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.243104][ T9] device veth1_macvtap left promiscuous mode [ 165.249205][ T9] device veth0_macvtap left promiscuous mode [ 165.256121][ T9] device veth1_vlan left promiscuous mode [ 165.261927][ T9] device veth0_vlan left promiscuous mode [ 165.271643][ T5127] EXT4-fs (loop3): Ignoring removed orlov option [ 165.282604][ T9] device veth1_macvtap left promiscuous mode [ 165.294051][ T9] device veth0_macvtap left promiscuous mode [ 165.300601][ T9] device veth1_vlan left promiscuous mode [ 165.307270][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 165.311321][ T9] device veth0_vlan left promiscuous mode [ 165.393694][ T9] device veth1_macvtap left promiscuous mode [ 165.399757][ T9] device veth0_macvtap left promiscuous mode [ 165.412607][ T9] device veth1_vlan left promiscuous mode [ 165.418437][ T9] device veth0_vlan left promiscuous mode [ 165.551542][ T5137] netlink: 10 bytes leftover after parsing attributes in process `syz.3.427'. [ 165.752085][ T5141] loop3: detected capacity change from 0 to 2048 [ 165.870968][ T5141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.165897][ T9] team0 (unregistering): Port device team_slave_1 removed [ 166.191464][ T9] team0 (unregistering): Port device team_slave_0 removed [ 166.205554][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.223621][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.307635][ T9] bond0 (unregistering): Released all slaves [ 166.467937][ T9] team0 (unregistering): Port device team_slave_1 removed [ 166.482927][ T9] team0 (unregistering): Port device team_slave_0 removed [ 166.498675][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.517415][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.605881][ T9] bond0 (unregistering): Released all slaves [ 166.766647][ T9] team0 (unregistering): Port device team_slave_1 removed [ 166.783514][ T9] team0 (unregistering): Port device team_slave_0 removed [ 166.799624][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.819397][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.908415][ T9] bond0 (unregistering): Released all slaves [ 167.029818][ T5148] loop3: detected capacity change from 0 to 4096 [ 167.127412][ T5148] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 167.154380][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.173500][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.292217][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.303549][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.336887][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.348792][ T5148] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 167.497445][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.691516][ T5157] loop2: detected capacity change from 0 to 1024 [ 167.831175][ T5157] EXT4-fs (loop2): Ignoring removed orlov option [ 167.873212][ T5161] program syz.1.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.984940][ T5157] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 168.081202][ T5167] loop0: detected capacity change from 0 to 2048 [ 168.179376][ T5167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.392594][ T5175] loop0: detected capacity change from 0 to 128 [ 168.542856][ T5175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.616698][ T5175] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 168.741300][ T5185] input: syz0 as /devices/virtual/input/input5 [ 168.749732][ T1172] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 168.764173][ T4871] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 169.158553][ T5199] loop0: detected capacity change from 0 to 1024 [ 169.229307][ T5199] EXT4-fs (loop0): Ignoring removed orlov option [ 169.268609][ T5201] loop3: detected capacity change from 0 to 2048 [ 169.302060][ T5203] loop2: detected capacity change from 0 to 2048 [ 169.303441][ T5199] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 169.392065][ T5201] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 169.415601][ T5201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.436540][ T5203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.766477][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 170.001090][ T5211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.395371][ T5211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.606654][ T5211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.785145][ T5211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.961956][ T5211] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.003960][ T5211] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.040452][ T5211] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.066889][ T5211] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.177584][ T5230] loop3: detected capacity change from 0 to 256 [ 171.275201][ T5228] loop0: detected capacity change from 0 to 4096 [ 171.288486][ T5230] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 171.321644][ T5230] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 171.339216][ T5234] loop4: detected capacity change from 0 to 1024 [ 171.379490][ T5230] attempt to access beyond end of device [ 171.379490][ T5230] loop3: rw=524288, want=408, limit=256 [ 171.410646][ T5234] EXT4-fs (loop4): Ignoring removed orlov option [ 171.420409][ T5230] attempt to access beyond end of device [ 171.420409][ T5230] loop3: rw=524288, want=664, limit=256 [ 171.441096][ T5228] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 171.463399][ T5230] attempt to access beyond end of device [ 171.463399][ T5230] loop3: rw=0, want=288, limit=256 [ 171.483730][ T5236] loop2: detected capacity change from 0 to 2048 [ 171.492296][ T5228] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 171.521242][ T26] audit: type=1800 audit(1720060268.720:3): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.461" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 171.552476][ T5234] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 171.592361][ T5236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.832567][ T4883] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 173.086783][ T4716] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 173.097312][ T4716] Bluetooth: hci3: Injecting HCI hardware error event [ 173.111900][ T3511] Bluetooth: hci3: hardware error 0x00 [ 173.189005][ T5268] loop2: detected capacity change from 0 to 1024 [ 173.355252][ T5268] EXT4-fs (loop2): Ignoring removed orlov option [ 173.429201][ T5268] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,orlov,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x000000000000000d,dioread_lock,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 174.035449][ T5259] loop3: detected capacity change from 0 to 32768 [ 174.059980][ T5257] loop0: detected capacity change from 0 to 32768 [ 174.169265][ T5275] loop1: detected capacity change from 0 to 32768 [ 174.199868][ T5259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (5259) [ 174.253324][ T5257] XFS (loop0): Mounting V5 Filesystem [ 174.261573][ T5275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.479 (5275) [ 174.266513][ T5259] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 174.282794][ T5259] BTRFS info (device loop3): setting nodatacow, compression disabled [ 174.292258][ T5259] BTRFS info (device loop3): turning on flush-on-commit [ 174.300110][ T5259] BTRFS info (device loop3): enabling auto defrag [ 174.307857][ T5259] BTRFS info (device loop3): max_inline at 0 [ 174.356632][ T5259] BTRFS info (device loop3): using free space tree [ 174.392250][ T5259] BTRFS info (device loop3): has skinny extents [ 174.513482][ T5275] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 174.542718][ T5275] BTRFS info (device loop1): enabling auto defrag [ 174.601312][ T5275] BTRFS info (device loop1): doing ref verification [ 174.633045][ T5275] BTRFS info (device loop1): max_inline at 0 [ 174.639222][ T5257] XFS (loop0): Ending clean mount [ 174.655135][ T5275] BTRFS info (device loop1): force clearing of disk cache [ 174.695320][ T5275] BTRFS info (device loop1): turning on sync discard [ 174.702132][ T5275] BTRFS info (device loop1): disabling tree log [ 174.752491][ T5275] BTRFS info (device loop1): using free space tree [ 174.822771][ T5275] BTRFS info (device loop1): has skinny extents [ 174.932745][ T4883] XFS (loop0): Unmounting Filesystem [ 175.141892][ T5275] BTRFS info (device loop1): enabling ssd optimizations [ 175.203817][ T5275] BTRFS info (device loop1): clearing free space tree [ 175.263431][ T5275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.276957][ T5275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.350398][ T5275] BTRFS info (device loop1): creating free space tree [ 175.374601][ T5275] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.384913][ T5275] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.469051][ T5259] BTRFS error (device loop3): open_ctree failed [ 175.981162][ T5354] loop0: detected capacity change from 0 to 4096 [ 176.174605][ T5354] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 176.787418][ T5366] loop2: detected capacity change from 0 to 4096 [ 176.834979][ T4883] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 177.551864][ T4883] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 177.558567][ T4883] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 177.821763][ T5383] syz.2.501[5383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.821882][ T5383] syz.2.501[5383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.062896][ T26] audit: type=1326 audit(1720060275.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6704fbd9 code=0x7ffc0000 [ 178.096346][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.245220][ T26] audit: type=1326 audit(1720060275.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5b6704fbd9 code=0x7ffc0000 [ 178.373395][ T26] audit: type=1326 audit(1720060275.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6704fbd9 code=0x7ffc0000 [ 178.395473][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.910851][ T5404] deleting an unspecified loop device is not supported. [ 180.171492][ T5380] loop0: detected capacity change from 0 to 32768 [ 180.963954][ T5408] loop2: detected capacity change from 0 to 4096 [ 184.036494][ T5460] loop4: detected capacity change from 0 to 256 [ 184.505918][ T5463] loop0: detected capacity change from 0 to 2048 [ 184.584758][ T5463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.924715][ T26] audit: type=1326 audit(1720060282.130:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddd3348bd9 code=0x0 [ 185.887214][ T26] audit: type=1326 audit(1720060283.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 185.911977][ T5476] loop3: detected capacity change from 0 to 2048 [ 185.958090][ T3496] loop3: p3 < > p4 < > [ 185.962200][ T26] audit: type=1326 audit(1720060283.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 185.963060][ T3496] loop3: partition table partially beyond EOD, truncated [ 186.074251][ T3496] loop3: p3 start 4284289 is beyond EOD, truncated [ 186.087647][ T5473] loop4: detected capacity change from 0 to 4096 [ 186.141321][ T26] audit: type=1326 audit(1720060283.090:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.169891][ T5476] loop3: p3 < > p4 < > [ 186.188303][ T5476] loop3: partition table partially beyond EOD, truncated [ 186.192673][ T26] audit: type=1326 audit(1720060283.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.229840][ T5476] loop3: p3 start 4284289 is beyond EOD, truncated [ 186.269003][ T26] audit: type=1326 audit(1720060283.090:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.300002][ T26] audit: type=1326 audit(1720060283.090:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.332188][ T2964] loop3: p3 < > p4 < > [ 186.350246][ T2964] loop3: partition table partially beyond EOD, truncated [ 186.379506][ T2964] loop3: p3 start 4284289 is beyond EOD, truncated [ 186.408306][ T26] audit: type=1326 audit(1720060283.090:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.482272][ T26] audit: type=1326 audit(1720060283.090:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.584489][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 186.640837][ T26] audit: type=1326 audit(1720060283.090:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945c48bd9 code=0x7ffc0000 [ 186.837925][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 186.877565][ T5493] loop3: detected capacity change from 0 to 2048 [ 186.890975][ T5495] loop0: detected capacity change from 0 to 1024 [ 187.024839][ T5497] loop4: detected capacity change from 0 to 512 [ 187.460745][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.541: inode #1: comm syz.4.541: iget: illegal inode # [ 187.481123][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.541: error while reading EA inode 1 err=-117 [ 187.503723][ T5497] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 187.518124][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.541: inode #1: comm syz.4.541: iget: illegal inode # [ 187.543359][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.541: error while reading EA inode 1 err=-117 [ 187.561046][ T5497] EXT4-fs (loop4): 1 orphan inode deleted [ 187.566978][ T5497] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 187.627183][ T5496] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.541: invalid indirect mapped block 234881024 (level 0) [ 187.656772][ T5493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.759171][ T5495] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 188.101433][ T5511] input: syz1 as /devices/virtual/input/input6 [ 188.382541][ T2924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.641981][ T5522] 9pnet: Insufficient options for proto=fd [ 188.692781][ T5355] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.742683][ T2924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.778100][ T2924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.993593][ T5355] usb 5-1: device descriptor read/64, error -71 [ 189.000510][ T2924] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 189.010175][ T2924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.040706][ T2924] usb 2-1: config 0 descriptor?? [ 189.179979][ T5529] loop0: detected capacity change from 0 to 512 [ 189.262734][ T5355] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 189.632717][ T5355] usb 5-1: device descriptor read/64, error -71 [ 189.657063][ T5529] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.553: inode #1: comm syz.0.553: iget: illegal inode # [ 189.677930][ T5529] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.553: error while reading EA inode 1 err=-117 [ 189.694777][ T5529] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.553: inode #1: comm syz.0.553: iget: illegal inode # [ 189.708906][ T5529] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.553: error while reading EA inode 1 err=-117 [ 189.722147][ T5529] EXT4-fs (loop0): 1 orphan inode deleted [ 189.728008][ T5529] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 189.787420][ T5528] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.553: invalid indirect mapped block 234881024 (level 0) [ 189.787797][ T2924] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 189.845365][ T5355] usb usb5-port1: attempt power cycle [ 189.863088][ T2924] usb 2-1: USB disconnect, device number 3 [ 189.916738][ T5533] loop2: detected capacity change from 0 to 512 [ 190.046556][ T5533] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 190.093658][ T5533] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 190.152194][ T5533] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,usrquota,prjquota,debug_want_extra_isize=0x0000000000000006,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 190.312556][ T5355] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.387239][ T5538] loop0: detected capacity change from 0 to 2048 [ 190.412786][ T5355] usb 5-1: device descriptor read/8, error -71 [ 190.583185][ T5538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.599209][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 190.599226][ T26] audit: type=1326 audit(1720060287.800:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5544 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba6ea3bd9 code=0x7ffc0000 [ 190.702480][ T5355] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.704900][ T26] audit: type=1326 audit(1720060287.850:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5544 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8ba6ea3bd9 code=0x7ffc0000 [ 190.784462][ T26] audit: type=1326 audit(1720060287.850:39): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=5544 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba6ea3bd9 code=0x7ffc0000 [ 190.812804][ T5355] usb 5-1: device descriptor read/8, error -71 [ 190.932929][ T5355] usb usb5-port1: unable to enumerate USB device [ 191.798256][ T5545] loop2: detected capacity change from 0 to 40427 [ 191.886241][ T5355] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.905881][ T5554] loop0: detected capacity change from 0 to 32768 [ 191.950449][ T5545] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 191.966758][ T5554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.564 (5554) [ 191.999439][ T5545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 192.030352][ T5554] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.037394][ T5545] F2FS-fs (loop2): invalid crc value [ 192.049650][ T5554] BTRFS info (device loop0): using free space tree [ 192.066260][ T5554] BTRFS info (device loop0): has skinny extents [ 192.115235][ T5545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.148222][ T5355] usb 5-1: Using ep0 maxpacket: 16 [ 192.282228][ T5355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.312518][ T5355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.323269][ T5545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 192.330362][ T5545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.362608][ T5554] BTRFS info (device loop0): enabling ssd optimizations [ 192.392465][ T5355] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.627237][ T5355] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.637506][ T5355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.649023][ T5355] usb 5-1: config 0 descriptor?? [ 193.274751][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.302810][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.374050][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.412596][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.419884][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.430943][ T5591] loop1: detected capacity change from 0 to 256 [ 193.448097][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.471171][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.484201][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.491496][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.500733][ T5355] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.523203][ T5355] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 193.544712][ T5355] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 193.557934][ T5355] microsoft 0003:045E:07DA.0002: no inputs found [ 193.565355][ T5355] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 193.573318][ T5591] FAT-fs (loop1): Directory bread(block 64) failed [ 193.587280][ T5591] FAT-fs (loop1): Directory bread(block 65) failed [ 193.594009][ T5355] usb 5-1: USB disconnect, device number 7 [ 193.625288][ T5591] FAT-fs (loop1): Directory bread(block 66) failed [ 193.645148][ T5591] FAT-fs (loop1): Directory bread(block 67) failed [ 193.683936][ T5591] FAT-fs (loop1): Directory bread(block 68) failed [ 193.690547][ T5591] FAT-fs (loop1): Directory bread(block 69) failed [ 193.734596][ T5591] FAT-fs (loop1): Directory bread(block 70) failed [ 193.741195][ T5591] FAT-fs (loop1): Directory bread(block 71) failed [ 193.762878][ T5591] FAT-fs (loop1): Directory bread(block 72) failed [ 193.769570][ T5591] FAT-fs (loop1): Directory bread(block 73) failed [ 193.980770][ T5585] loop3: detected capacity change from 0 to 32768 [ 194.120150][ T5585] XFS (loop3): Mounting V5 Filesystem [ 194.127750][ T5603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.570'. [ 194.318594][ T5585] XFS (loop3): Ending clean mount [ 194.334687][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341153][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.435550][ T5617] loop1: detected capacity change from 0 to 2048 [ 194.442589][ T5585] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 194.498741][ T5585] XFS (loop3): Unmount and run xfs_repair [ 194.531053][ T5585] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 194.539146][ T5617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.552536][ T3880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.584280][ T5585] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 194.651032][ T5585] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 194.673119][ T5585] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 194.699057][ T5585] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 194.735671][ T5585] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 194.772544][ T3880] usb 1-1: device descriptor read/64, error -71 [ 194.775158][ T5585] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 194.810307][ T5585] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 194.852598][ T5585] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 194.905028][ T5585] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 194.905816][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.583'. [ 194.938609][ T5585] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 194.978921][ T5585] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 195.049228][ T3880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.054588][ T4871] XFS (loop3): Unmounting Filesystem [ 195.282652][ T3880] usb 1-1: device descriptor read/64, error -71 [ 195.402705][ T3880] usb usb1-port1: attempt power cycle [ 195.473860][ T5625] loop4: detected capacity change from 0 to 32768 [ 195.537584][ T5625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.578 (5625) [ 195.550224][ T5608] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.593105][ T5625] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 195.639651][ T5625] BTRFS info (device loop4): using free space tree [ 195.666098][ T5625] BTRFS info (device loop4): has skinny extents [ 195.797221][ T5608] usb 3-1: Using ep0 maxpacket: 16 [ 195.842470][ T3880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.876557][ T5631] loop1: detected capacity change from 0 to 40427 [ 195.922819][ T5608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 195.954577][ T3880] usb 1-1: device descriptor read/8, error -71 [ 195.964205][ T5608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 195.974798][ T5625] BTRFS info (device loop4): enabling ssd optimizations [ 195.984621][ T5608] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 196.008586][ T5631] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 196.053794][ T5631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.102555][ T5608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.158830][ T5631] F2FS-fs (loop1): invalid crc value [ 196.172211][ T5608] usb 3-1: config 0 descriptor?? [ 196.223870][ T5631] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.242764][ T3880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.342868][ T3880] usb 1-1: device descriptor read/8, error -71 [ 196.397142][ T5631] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.404527][ T5631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.442075][ T5641] netlink: 652 bytes leftover after parsing attributes in process `syz.2.587'. [ 196.452806][ T3880] usb usb1-port1: unable to enumerate USB device [ 197.612458][ T5679] loop0: detected capacity change from 0 to 2048 [ 197.705566][ T5679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.722533][ T5608] usbhid 3-1:0.0: can't add hid device: -71 [ 197.728602][ T5608] usbhid: probe of 3-1:0.0 failed with error -71 [ 197.793006][ T5608] usb 3-1: USB disconnect, device number 5 [ 198.462962][ T5608] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.522592][ T5608] usb 4-1: device descriptor read/64, error -71 [ 199.632723][ T3880] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.760473][ T5730] loop0: detected capacity change from 0 to 2048 [ 199.792528][ T5608] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.900492][ T5730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.922500][ T3880] usb 3-1: Using ep0 maxpacket: 16 [ 199.978589][ T150] block nbd4: Attempted send on invalid socket [ 199.982480][ T5608] usb 4-1: device descriptor read/64, error -71 [ 199.985052][ T150] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.015130][ T5745] VFS: could not find a valid V7 on nbd4. [ 200.083189][ T3880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 200.102835][ T5608] usb usb4-port1: attempt power cycle [ 200.110817][ T3880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 200.120804][ T3880] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 200.131714][ T3880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.146105][ T3880] usb 3-1: config 0 descriptor?? [ 200.280030][ T3511] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 200.416980][ T5718] netlink: 652 bytes leftover after parsing attributes in process `syz.2.604'. [ 200.548492][ T5608] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.653919][ T5608] usb 4-1: device descriptor read/8, error -71 [ 200.729188][ T5718] udc-core: couldn't find an available UDC or it's busy [ 200.771852][ T5718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.798363][ T5769] loop1: detected capacity change from 0 to 2048 [ 200.824703][ T3880] hid (null): unknown global tag 0xe [ 200.835453][ T3880] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 200.852398][ T3880] hid-generic 0003:0158:0100.0003: unexpected long global item [ 200.870107][ T3880] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 200.909724][ T5769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.922498][ T5608] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.027210][ T5608] usb 4-1: device descriptor read/8, error -71 [ 201.152646][ T5608] usb usb4-port1: unable to enumerate USB device [ 201.235261][ T23] usb 3-1: USB disconnect, device number 6 [ 202.505177][ T26] audit: type=1800 audit(1720060299.710:40): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 202.714516][ T5805] loop3: detected capacity change from 0 to 2048 [ 202.800125][ T5805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.972808][ T3880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.152277][ T5814] mmap: syz.2.645 (5814) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 203.314877][ T5822] netlink: 280 bytes leftover after parsing attributes in process `syz.1.648'. [ 203.362758][ T3880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.387087][ T3880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.437963][ T3880] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 203.476942][ T3880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.570203][ T3880] usb 5-1: config 0 descriptor?? [ 203.716112][ T5832] loop1: detected capacity change from 0 to 2048 [ 203.802883][ T5832] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.082232][ T3880] lenovo 0003:17EF:6067.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0 [ 204.310020][ T3880] usb 5-1: USB disconnect, device number 8 [ 204.333230][ T3559] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 204.367037][ T3559] Bluetooth: hci6: Injecting HCI hardware error event [ 204.404827][ T3511] Bluetooth: hci6: hardware error 0x00 [ 204.425618][ T5853] netlink: 280 bytes leftover after parsing attributes in process `syz.1.661'. [ 204.563924][ T3559] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 204.572510][ T3559] Bluetooth: hci0: Injecting HCI hardware error event [ 204.579743][ T3509] Bluetooth: hci0: hardware error 0x00 [ 204.737224][ T5863] loop3: detected capacity change from 0 to 512 [ 204.931497][ T5863] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 204.947450][ T5863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 204.962901][ T5863] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.062417][ T5863] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 205.077192][ T5869] loop1: detected capacity change from 0 to 2048 [ 205.096683][ T5863] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.666: bg 0: block 40: padding at end of block bitmap is not set [ 205.153753][ T5883] binder: 5882:5883 ioctl c0306201 0 returned -14 [ 205.161458][ T5863] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 205.202968][ T3513] Bluetooth: hci2: link tx timeout [ 205.208674][ T3513] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.209547][ T5869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.232719][ T5863] EXT4-fs (loop3): 1 truncate cleaned up [ 205.238422][ T5863] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.281374][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.312390][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.201677][ T5949] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 207.298318][ T3880] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.572557][ T3880] usb 1-1: Using ep0 maxpacket: 8 [ 207.702603][ T3880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.747770][ T3880] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.800323][ T3880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.843344][ T3880] usb 1-1: config 0 descriptor?? [ 208.105559][ T4717] usb 1-1: USB disconnect, device number 7 [ 208.736681][ T5980] overlayfs: failed to resolve './file1': -2 [ 209.674006][ T6003] mkiss: ax0: crc mode is auto. [ 209.913841][ T6013] loop4: detected capacity change from 0 to 512 [ 210.174942][ T6013] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 210.185792][ T6013] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.199392][ T6013] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.214538][ T6013] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 210.227221][ T6013] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.719: bg 0: block 40: padding at end of block bitmap is not set [ 210.248386][ T6013] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 210.272661][ T6013] EXT4-fs (loop4): 1 truncate cleaned up [ 210.282523][ T6013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.881186][ T26] audit: type=1800 audit(1720060308.080:41): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.723" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 211.145377][ T6033] ================================================================== [ 211.154014][ T6033] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f1/0x230 [ 211.161943][ T6033] Read of size 2 at addr ffff888063d83d40 by task syz.1.724/6033 [ 211.169688][ T6033] [ 211.172042][ T6033] CPU: 0 PID: 6033 Comm: syz.1.724 Not tainted 5.15.161-syzkaller #0 [ 211.180129][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.190220][ T6033] Call Trace: [ 211.193518][ T6033] [ 211.196464][ T6033] dump_stack_lvl+0x1e3/0x2d0 [ 211.201177][ T6033] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 211.206832][ T6033] ? _printk+0xd1/0x120 [ 211.211022][ T6033] ? __wake_up_klogd+0xcc/0x100 [ 211.215901][ T6033] ? panic+0x860/0x860 [ 211.219992][ T6033] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 211.225509][ T6033] print_address_description+0x63/0x3b0 [ 211.231087][ T6033] ? cfg80211_wext_freq+0x1f1/0x230 [ 211.236328][ T6033] kasan_report+0x16b/0x1c0 [ 211.240864][ T6033] ? cfg80211_wext_freq+0x1f1/0x230 [ 211.246102][ T6033] cfg80211_wext_freq+0x1f1/0x230 [ 211.251172][ T6033] cfg80211_wext_siwscan+0x4fd/0xfc0 [ 211.256524][ T6033] ioctl_standard_iw_point+0x781/0xca0 [ 211.262052][ T6033] ? cmp_bss+0xde0/0xde0 [ 211.266339][ T6033] ? iw_handler_get_iwstats+0x240/0x240 [ 211.271933][ T6033] ? wext_ioctl_dispatch+0xb9/0x460 [ 211.277178][ T6033] ? __lock_acquire+0x1ff0/0x1ff0 [ 211.282245][ T6033] ? mutex_lock_io_nested+0x60/0x60 [ 211.287663][ T6033] ? apparmor_capable+0x12e/0x190 [ 211.292722][ T6033] ? full_name_hash+0x8f/0xe0 [ 211.297447][ T6033] ioctl_standard_call+0xc3/0x280 [ 211.302510][ T6033] ? cmp_bss+0xde0/0xde0 [ 211.306794][ T6033] ? cmp_bss+0xde0/0xde0 [ 211.311066][ T6033] wext_ioctl_dispatch+0x16f/0x460 [ 211.316218][ T6033] ? wext_ioctl_dispatch+0x460/0x460 [ 211.321544][ T6033] ? iw_handler_get_private+0x1e0/0x1e0 [ 211.327134][ T6033] wext_handle_ioctl+0x15b/0x260 [ 211.332117][ T6033] ? call_commit_handler+0xf0/0xf0 [ 211.337285][ T6033] sock_ioctl+0x13b/0x770 [ 211.341659][ T6033] ? sock_poll+0x410/0x410 [ 211.346114][ T6033] ? __fget_files+0x413/0x480 [ 211.350833][ T6033] ? bpf_lsm_file_ioctl+0x5/0x10 [ 211.355817][ T6033] ? security_file_ioctl+0x7d/0xa0 [ 211.360945][ T6033] ? sock_poll+0x410/0x410 [ 211.365383][ T6033] __se_sys_ioctl+0xf1/0x160 [ 211.369996][ T6033] do_syscall_64+0x3b/0xb0 [ 211.374425][ T6033] ? clear_bhb_loop+0x15/0x70 [ 211.379108][ T6033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.385012][ T6033] RIP: 0033:0x7f8ba6ea3bd9 [ 211.389433][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.409049][ T6033] RSP: 002b:00007f8ba5924048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.417465][ T6033] RAX: ffffffffffffffda RBX: 00007f8ba7031f60 RCX: 00007f8ba6ea3bd9 [ 211.425524][ T6033] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 211.433493][ T6033] RBP: 00007f8ba6f12a98 R08: 0000000000000000 R09: 0000000000000000 [ 211.441463][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.449430][ T6033] R13: 000000000000000b R14: 00007f8ba7031f60 R15: 00007ffdb5d67898 [ 211.457417][ T6033] [ 211.460429][ T6033] [ 211.462742][ T6033] Allocated by task 6033: [ 211.467058][ T6033] ____kasan_kmalloc+0xba/0xf0 [ 211.471817][ T6033] __kmalloc+0x168/0x300 [ 211.476089][ T6033] ioctl_standard_iw_point+0x4aa/0xca0 [ 211.481549][ T6033] ioctl_standard_call+0xc3/0x280 [ 211.486827][ T6033] wext_ioctl_dispatch+0x16f/0x460 [ 211.492072][ T6033] wext_handle_ioctl+0x15b/0x260 [ 211.497028][ T6033] sock_ioctl+0x13b/0x770 [ 211.501359][ T6033] __se_sys_ioctl+0xf1/0x160 [ 211.505944][ T6033] do_syscall_64+0x3b/0xb0 [ 211.510356][ T6033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.516853][ T6033] [ 211.519192][ T6033] Last potentially related work creation: [ 211.524904][ T6033] kasan_save_stack+0x36/0x60 [ 211.529580][ T6033] kasan_record_aux_stack+0xba/0x100 [ 211.534864][ T6033] insert_work+0x54/0x3e0 [ 211.539188][ T6033] __queue_work+0x963/0xd00 [ 211.543704][ T6033] call_timer_fn+0x16d/0x560 [ 211.548285][ T6033] __run_timers+0x6a8/0x890 [ 211.552793][ T6033] run_timer_softirq+0x63/0xf0 [ 211.557556][ T6033] handle_softirqs+0x3a7/0x930 [ 211.562311][ T6033] __irq_exit_rcu+0x157/0x240 [ 211.566984][ T6033] irq_exit_rcu+0x5/0x20 [ 211.571217][ T6033] sysvec_apic_timer_interrupt+0x91/0xb0 [ 211.576850][ T6033] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 211.582831][ T6033] [ 211.585149][ T6033] The buggy address belongs to the object at ffff888063d83c00 [ 211.585149][ T6033] which belongs to the cache kmalloc-512 of size 512 [ 211.599302][ T6033] The buggy address is located 320 bytes inside of [ 211.599302][ T6033] 512-byte region [ffff888063d83c00, ffff888063d83e00) [ 211.612580][ T6033] The buggy address belongs to the page: [ 211.618216][ T6033] page:ffffea00018f6000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63d80 [ 211.628367][ T6033] head:ffffea00018f6000 order:2 compound_mapcount:0 compound_pincount:0 [ 211.636701][ T6033] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 211.644688][ T6033] raw: 00fff00000010200 ffffea0001f93500 0000000200000002 ffff888011c41c80 [ 211.653269][ T6033] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 211.661846][ T6033] page dumped because: kasan: bad access detected [ 211.668258][ T6033] page_owner tracks the page as allocated [ 211.673968][ T6033] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3505, ts 56469481491, free_ts 16623331425 [ 211.694021][ T6033] get_page_from_freelist+0x322a/0x33c0 [ 211.699577][ T6033] __alloc_pages+0x272/0x700 [ 211.704162][ T6033] new_slab+0xbb/0x4b0 [ 211.708232][ T6033] ___slab_alloc+0x6f6/0xe10 [ 211.712818][ T6033] __kmalloc_node_track_caller+0x1f6/0x390 [ 211.718620][ T6033] pskb_expand_head+0x111/0x1130 [ 211.723561][ T6033] netlink_trim+0x183/0x220 [ 211.728065][ T6033] netlink_broadcast_filtered+0x62/0x11a0 [ 211.733788][ T6033] nlmsg_notify+0xf7/0x1b0 [ 211.738204][ T6033] rtmsg_fib+0x39f/0x620 [ 211.742471][ T6033] fib_table_insert+0xfc0/0x1f90 [ 211.747432][ T6033] fib_add_ifaddr+0xc24/0x1730 [ 211.752207][ T6033] fib_netdev_event+0x61d/0x760 [ 211.757058][ T6033] raw_notifier_call_chain+0xd0/0x170 [ 211.762429][ T6033] __dev_notify_flags+0x304/0x610 [ 211.767455][ T6033] dev_change_flags+0xe7/0x190 [ 211.772222][ T6033] page last free stack trace: [ 211.776885][ T6033] free_unref_page_prepare+0xc34/0xcf0 [ 211.782342][ T6033] free_unref_page+0x95/0x2d0 [ 211.787015][ T6033] free_contig_range+0x95/0xf0 [ 211.791778][ T6033] destroy_args+0xfe/0x980 [ 211.796193][ T6033] debug_vm_pgtable+0x40d/0x470 [ 211.801041][ T6033] do_one_initcall+0x22b/0x7a0 [ 211.805802][ T6033] do_initcall_level+0x157/0x210 [ 211.810940][ T6033] do_initcalls+0x49/0x90 [ 211.815288][ T6033] kernel_init_freeable+0x425/0x5c0 [ 211.820505][ T6033] kernel_init+0x19/0x290 [ 211.824868][ T6033] ret_from_fork+0x1f/0x30 [ 211.829283][ T6033] [ 211.831686][ T6033] Memory state around the buggy address: [ 211.837307][ T6033] ffff888063d83c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.845364][ T6033] ffff888063d83c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.853429][ T6033] >ffff888063d83d00: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 211.861479][ T6033] ^ [ 211.867619][ T6033] ffff888063d83d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.875764][ T6033] ffff888063d83e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.883815][ T6033] ================================================================== [ 211.891865][ T6033] Disabling lock debugging due to kernel taint [ 211.952530][ T6033] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.959812][ T6033] CPU: 1 PID: 6033 Comm: syz.1.724 Tainted: G B 5.15.161-syzkaller #0 [ 211.969383][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.979464][ T6033] Call Trace: [ 211.982769][ T6033] [ 211.985721][ T6033] dump_stack_lvl+0x1e3/0x2d0 [ 211.990422][ T6033] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 211.996078][ T6033] ? panic+0x860/0x860 [ 212.000317][ T6033] ? preempt_schedule_common+0xa6/0xd0 [ 212.005808][ T6033] ? preempt_schedule+0xd9/0xe0 [ 212.010694][ T6033] panic+0x318/0x860 [ 212.014623][ T6033] ? rcu_is_watching+0x11/0xa0 [ 212.019409][ T6033] ? check_panic_on_warn+0x1d/0xa0 [ 212.024553][ T6033] ? fb_is_primary_device+0xd0/0xd0 [ 212.029765][ T6033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 212.035935][ T6033] ? check_panic_on_warn+0x1d/0xa0 [ 212.041064][ T6033] ? check_panic_on_warn+0x6a/0xa0 [ 212.046187][ T6033] check_panic_on_warn+0x7e/0xa0 [ 212.051187][ T6033] ? cfg80211_wext_freq+0x1f1/0x230 [ 212.056404][ T6033] end_report+0x6d/0xf0 [ 212.060590][ T6033] kasan_report+0x18e/0x1c0 [ 212.065126][ T6033] ? cfg80211_wext_freq+0x1f1/0x230 [ 212.070343][ T6033] cfg80211_wext_freq+0x1f1/0x230 [ 212.075425][ T6033] cfg80211_wext_siwscan+0x4fd/0xfc0 [ 212.080944][ T6033] ioctl_standard_iw_point+0x781/0xca0 [ 212.086438][ T6033] ? cmp_bss+0xde0/0xde0 [ 212.090699][ T6033] ? iw_handler_get_iwstats+0x240/0x240 [ 212.096251][ T6033] ? wext_ioctl_dispatch+0xb9/0x460 [ 212.101445][ T6033] ? __lock_acquire+0x1ff0/0x1ff0 [ 212.106468][ T6033] ? mutex_lock_io_nested+0x60/0x60 [ 212.111665][ T6033] ? apparmor_capable+0x12e/0x190 [ 212.116685][ T6033] ? full_name_hash+0x8f/0xe0 [ 212.121366][ T6033] ioctl_standard_call+0xc3/0x280 [ 212.126393][ T6033] ? cmp_bss+0xde0/0xde0 [ 212.130637][ T6033] ? cmp_bss+0xde0/0xde0 [ 212.134875][ T6033] wext_ioctl_dispatch+0x16f/0x460 [ 212.139982][ T6033] ? wext_ioctl_dispatch+0x460/0x460 [ 212.145262][ T6033] ? iw_handler_get_private+0x1e0/0x1e0 [ 212.150806][ T6033] wext_handle_ioctl+0x15b/0x260 [ 212.155743][ T6033] ? call_commit_handler+0xf0/0xf0 [ 212.160858][ T6033] sock_ioctl+0x13b/0x770 [ 212.165186][ T6033] ? sock_poll+0x410/0x410 [ 212.169602][ T6033] ? __fget_files+0x413/0x480 [ 212.174282][ T6033] ? bpf_lsm_file_ioctl+0x5/0x10 [ 212.179215][ T6033] ? security_file_ioctl+0x7d/0xa0 [ 212.184322][ T6033] ? sock_poll+0x410/0x410 [ 212.188738][ T6033] __se_sys_ioctl+0xf1/0x160 [ 212.193347][ T6033] do_syscall_64+0x3b/0xb0 [ 212.197775][ T6033] ? clear_bhb_loop+0x15/0x70 [ 212.202450][ T6033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.208341][ T6033] RIP: 0033:0x7f8ba6ea3bd9 [ 212.212766][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.232390][ T6033] RSP: 002b:00007f8ba5924048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.240803][ T6033] RAX: ffffffffffffffda RBX: 00007f8ba7031f60 RCX: 00007f8ba6ea3bd9 [ 212.248795][ T6033] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 212.256761][ T6033] RBP: 00007f8ba6f12a98 R08: 0000000000000000 R09: 0000000000000000 [ 212.264731][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.272697][ T6033] R13: 000000000000000b R14: 00007f8ba7031f60 R15: 00007ffdb5d67898 [ 212.280672][ T6033] [ 212.283977][ T6033] Kernel Offset: disabled [ 212.288330][ T6033] Rebooting in 86400 seconds..