last executing test programs: 2m9.939929331s ago: executing program 2 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000e00)={0x50001, 0x0, [0x8, 0x80000000, 0x8, 0x3, 0x5, 0x200, 0x401, 0x2]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xeeef0000, 0xf000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0xf000, 0x100000}) 2m9.800745453s ago: executing program 2 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000000000000000000000000000000000000000000020010000000000000000004e2400000a0000202100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000fdffffff0000080000000000000000000a000481680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 2m9.337243951s ago: executing program 2 (id=630): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f00000001c0)=""/149, 0x95, 0xfaff, 0xa}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)) eventfd(0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5882, 0x801, 0x1, 0xa8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2m8.968638907s ago: executing program 2 (id=638): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/consoles\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40480d0}, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 2m7.419849721s ago: executing program 2 (id=644): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x201049e, &(0x7f00000001c0)=ANY=[], 0x1, 0x640, &(0x7f0000000400)="$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") removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'security.', 'system.sock\xf0\x95\xa6\xa7proton/\x1flDv\x80\xb2\xee\xa6I\xe7\xb2\x84\xe3%U\x10[\x82\xc98J\xa3\xce\x96\xad+7\x13\x0fq\x84T7\x05.^G\xebS\xb6\xead\x96`\xad\x8a\xa5O\xd5\xf9\xee\xf7\xbf^\xeb\x13\x17J?z_\xa8W1Y\xb9\xca\t\xa7\xeb\x7f\'*\b\x80\xfc\xc1G\xbd\x1c\x8bn\xce\xda\xac\xb4\xef\x1f\xcbf\xcb\x1dSa/o\x04B\x81\xdd\xce\xad8\x1ep\x83\xcd\xf2\xb2_\x0f\x84\x1dB\xb1s\x1a\xf1]\x10\x18\x80\xaf\"\x8d\xca\x83\v,<\x91\xa9\xa1l\x1b\x85\x00\xb0\xfd\xfe\x10\x82\xbe_\xf9\xf5\xa8\xed]\xacX\xf48S\"\x97\x14Dj\xe2\xbe1\x7f}\x14\x9b\x16MY\xb5\x98\xe7\xa3]\xb34\x86\xd1\xb9Ze\xec.#\xaf\xe9\xc5\x81\xaa\x8f~\xa5h\ts\xe6\xa8\x9a\v\x87\xea\x92\xdc\x8a\xafu\x8b\xd6\x9fZ\f\xe1\xc7\xc3\xa9\x93\x86!\xbb9\xeak\v\xef\x8fyX\x1c\xb6\x04U\x9ci\xfb\x04\xab\x9ev\xec\x18\xa9\x0e\xa6g\xd77\xd9\xe4\xb4\xee\x8a\r\x8b5\xdfe\x15\xad\xf8g\xd70\xf5\xf9\x90\x91\x85\xc16\xc9\xb4mP\xfa\x1a\xe2\xaa\x98x\xccgj\x1bD\x84\xd8\xf1\x18],\xf4\xd9\x9bg\xb9\xd7\xb7L\x97\xaa\xb2*\xc7\xce\x19{\"$;Hu\x8b\x04b\xc6[\x95K\xadO:,\xc3\x1a\xf7c\xc33e:\xdd\xefIR\x86E\f%{\xecD\x8b\xba\xaadT]P\xf7z'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@noblock_validity}, {@noblock_validity}, {@data_err_abort}, {@nolazytime}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4c9, &(0x7f00000011c0)="$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") 2m6.575947605s ago: executing program 2 (id=655): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m6.434340936s ago: executing program 32 (id=655): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 10.838295639s ago: executing program 4 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$MSR(0x0, 0x100000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2100]}}], 0xffc8) 10.822707719s ago: executing program 1 (id=1057): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x41) 10.670927762s ago: executing program 1 (id=1058): r0 = socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x2d58, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) 9.751771836s ago: executing program 4 (id=1059): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x14406, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) shutdown(r1, 0x0) poll(0x0, 0x0, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1c011, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.404347382s ago: executing program 1 (id=1062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="9e", 0x1}], 0x1, 0x0, 0x0, 0x20008040}, 0x8000) 7.738313998s ago: executing program 5 (id=1063): r0 = syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x1000a05, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303030303030303030303230303030303030362c6769643d69676e6f72652c12e7473721b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc3c, &(0x7f0000000ec0)="$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") mkdirat(r0, &(0x7f0000000580)='./bus\x00', 0x171) 7.439803942s ago: executing program 1 (id=1064): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f00000001c0)=""/149, 0x95, 0xfaff, 0xa}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)) eventfd(0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 6.820973072s ago: executing program 4 (id=1066): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x81008e, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16=0x0], 0x4, 0x2ca, &(0x7f0000000740)="$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") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x1) 6.678842995s ago: executing program 1 (id=1067): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@remote}, {@in6=@private1, 0x2000000, 0x6c}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x81}, 0x70bd2d, 0x5, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x7, 0x4, 0x7, 0xf}, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 6.32520476s ago: executing program 5 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 6.306856031s ago: executing program 4 (id=1071): r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4354a99f0f0c49a54619a758892c8478466b46b7f4c33f5e874f145fea34e78151de12e20e0ef0d8b48f91798f70d68ff7ec40287ce926cf39406489b96f46d162113f3303d0bae27bc7eea8761e9e8d558a496fe15b0ce205c7ddd76a17d836ad162b0d33db4662188544fa1e012d1375b416e04d421f35130d6004efb35f581be8ae43589d71669f1784d2f5c1244ad3893bcbe4345a1b5de8d9b21945", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES64], 0x0, 0x1a4, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUjYpDBRuwGC9Uk7uqg1NwipADBxfBoCGNTTFR08tgSwtdpCDVDv4DOtVRBZ1EFJyLg+Cg59JNmqE4iINE7vJU8G/weQ33ue8H7p6HbzvshRng9+5ykwoJh/18RNDApIw6pUb52szfTW6MgotmXjf5zOREuLh0q9HptBbyF/Lk/imAH0n3twpfcFQxECrI593lZkNuBAwrdNVsQK5G8SFOnZ77iAk9zpHrOAwL61xS9KRQgwOlfvduKVxcOj3fbcy15lq3fX/mfPlsuXzOL92c77TKrxD3gSiesIIbkAkYc1dI1bm/pfcxLYjbVpEjxQHpOhtbzqkT0wOUu8MQ4V1hQOarbufVFU6SvRZfvsph4SlOwFSNMYUmOaiKXFYvxdOf9M+UIrvqOGeadzqza1eV/EpvVmQnK942qYKHX/SYiVfDId6zFjEVUY3YjNj+xqS8iU/Z26tejZ/PzXSM45DmXqPfX/DS8EF08Pgg4OdgPPmdSu6Vg7fmGxN82XuxLMuyLMuyLMuy/gN/AgAA//96xWPy") rseq(&(0x7f0000000340), 0x20, 0x0, 0x0) openat2(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x480) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x1, 0x0, 0x0, 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) mmap(&(0x7f00000cf000/0x4000)=nil, 0x4000, 0x9, 0x8031, r1, 0x8249a000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x12c28, 0xffffffffffffffff, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x401d4}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 5.367961085s ago: executing program 3 (id=1072): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/175, 0xaf}], 0x1}, 0xd0}], 0x1, 0x32, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 5.153586908s ago: executing program 5 (id=1075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7d, 0x20000000, 0x0, 0x8000f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000005c0)=0x2, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000f8000000852000000300000018520000100000000000000000000000950000220000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x2a211361, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6, 0xffffffffffffffff, 0x1, r7, r8], &(0x7f00000007c0), 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000780)={{0x2, 0x4e20, @broadcast}, {0x1}, 0x0, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_batadv\x00'}) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000940)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.235543723s ago: executing program 0 (id=1076): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x14406, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) shutdown(r1, 0x0) poll(0x0, 0x0, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1c011, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.84206881s ago: executing program 3 (id=1077): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f00000001c0)=""/149, 0x95, 0xfaff, 0xa}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)) eventfd(0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3.19968899s ago: executing program 5 (id=1078): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3.127994381s ago: executing program 4 (id=1079): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000580)={[{@shortad}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@noadinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, 0x0, 0x478) close_range(r0, 0xffffffffffffffff, 0x0) 3.063208791s ago: executing program 1 (id=1080): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 2.927317884s ago: executing program 5 (id=1081): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) io_setup(0x6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) io_destroy(0x0) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) ftruncate(0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 2.619983348s ago: executing program 3 (id=1082): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 2.603308489s ago: executing program 0 (id=1083): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x7, 0x9}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$isdn(0x22, 0x2, 0x25) r7 = socket$isdn(0x22, 0x2, 0x24) dup3(r6, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0x2000800000001f9, 0x190002) socket$nl_generic(0x10, 0x3, 0x10) dup(r8) timer_getoverrun(0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 1.88970059s ago: executing program 4 (id=1084): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x1000) write$9p(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0xd) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.808094811s ago: executing program 5 (id=1085): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000eb0000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) munlockall() 1.800966241s ago: executing program 3 (id=1086): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x4000000000010046) 1.793404122s ago: executing program 0 (id=1087): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xb52, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 1.548632385s ago: executing program 0 (id=1088): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2f}, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80700087}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x7abec691, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r6, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) sched_setscheduler(0xffffffffffffffff, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 395.892103ms ago: executing program 3 (id=1089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x325, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000004) 154.200127ms ago: executing program 3 (id=1090): sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 149.843807ms ago: executing program 0 (id=1091): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 0 (id=1092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f00000001c0)=""/149, 0x95, 0xfaff, 0xa}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)) eventfd(0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) kernel console output (not intermixed with test programs): interface batadv_slave_1 (retrying later): interface not active [ 72.111332][ T4166] team0: Port device team_slave_0 added [ 72.121364][ T4173] device hsr_slave_0 entered promiscuous mode [ 72.128843][ T4173] device hsr_slave_1 entered promiscuous mode [ 72.135411][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.143418][ T4173] Cannot create hsr debugfs directory [ 72.159385][ T4166] team0: Port device team_slave_1 added [ 72.218447][ T4167] device hsr_slave_0 entered promiscuous mode [ 72.225477][ T4167] device hsr_slave_1 entered promiscuous mode [ 72.227369][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 72.238975][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 72.241050][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.253360][ T4167] Cannot create hsr debugfs directory [ 72.282281][ T4177] device hsr_slave_0 entered promiscuous mode [ 72.289227][ T4177] device hsr_slave_1 entered promiscuous mode [ 72.296408][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 72.302551][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 72.309747][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 72.309768][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.309795][ T4177] Cannot create hsr debugfs directory [ 72.330006][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.337348][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.363801][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.414810][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.422200][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.449658][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.594241][ T4166] device hsr_slave_0 entered promiscuous mode [ 72.601426][ T4166] device hsr_slave_1 entered promiscuous mode [ 72.608255][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.616978][ T4166] Cannot create hsr debugfs directory [ 72.815109][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.827664][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.845257][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.855451][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.903559][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.913846][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.925127][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.936410][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.039365][ T4167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.057123][ T4167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.073931][ T4167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.101566][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.115042][ T4167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.138793][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.149383][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.159009][ T4173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.170767][ T4173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.180989][ T4173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.194274][ T4173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.209050][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.268150][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.277873][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.288667][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.296001][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.304392][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.313728][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.325357][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.332578][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.341740][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.382413][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.397713][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.409761][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.422912][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.442059][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.458570][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.467988][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.493162][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.506603][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.522263][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.531419][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.540911][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.550121][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.558957][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.589149][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.602176][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.615100][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.624525][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.651982][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.661372][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.670346][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.677480][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.693415][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.712425][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.722101][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.730955][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.740305][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.749764][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.759009][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.768240][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.777483][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.784583][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.827293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.847224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.858585][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.865738][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.874945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.885202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.894321][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.901538][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.911294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.922210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.941689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.960790][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.972834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.992253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.017290][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.027470][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.039508][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.049027][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.079220][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.088012][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.099381][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.109322][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.119126][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.128902][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.138187][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.149192][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.157950][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.166573][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.175004][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.193594][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.211044][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.222969][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.235283][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.244745][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.253305][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.263904][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.272981][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.282228][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.306093][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 74.312369][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 74.342818][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.356519][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.365178][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.372359][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.391008][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 74.397605][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 74.412390][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.416063][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 74.427634][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.440313][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.449622][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.458594][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.469598][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.477427][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.485339][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.509579][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.537508][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.554747][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.574007][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.604130][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.613117][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.623218][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.632072][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.641677][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.664030][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.676779][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.693209][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.702567][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.712299][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.733960][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.742844][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.767182][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.782529][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.801700][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.811247][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.820540][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.829147][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.838614][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.846719][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.855569][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.912433][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.927418][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.944909][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.952074][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.968416][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.978318][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.987392][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.994653][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.002864][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.021547][ T4165] device veth0_vlan entered promiscuous mode [ 75.045958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.055018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.071679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.083659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.096346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.103936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.113127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.126579][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.137635][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.146680][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.159297][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.195769][ T4165] device veth1_vlan entered promiscuous mode [ 75.207040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.224313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.234574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.250548][ T4177] device veth0_vlan entered promiscuous mode [ 75.277186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.285666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.295567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.306744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.315258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.324966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.333839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.342775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.351746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.361122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.371614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.380559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.398734][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.438851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.452596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.463749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.480290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.489971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.498965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.509641][ T4177] device veth1_vlan entered promiscuous mode [ 75.531978][ T4165] device veth0_macvtap entered promiscuous mode [ 75.544449][ T4165] device veth1_macvtap entered promiscuous mode [ 75.574818][ T4167] device veth0_vlan entered promiscuous mode [ 75.613669][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.622955][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.631911][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.642123][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.650949][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.660588][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.670128][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.679074][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.688281][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.698393][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.708089][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.718149][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.727101][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.735011][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.745510][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.764554][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.773205][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.782245][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.790286][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.799417][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.814104][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.822996][ T4173] device veth0_vlan entered promiscuous mode [ 75.833706][ T4177] device veth0_macvtap entered promiscuous mode [ 75.848735][ T4167] device veth1_vlan entered promiscuous mode [ 75.856367][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.864855][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.873593][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.883169][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.895492][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.908375][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917493][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927156][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.967695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.002002][ T4173] device veth1_vlan entered promiscuous mode [ 76.013015][ T4177] device veth1_macvtap entered promiscuous mode [ 76.046006][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.054636][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.079452][ T4167] device veth0_macvtap entered promiscuous mode [ 76.087095][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.095429][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.109830][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.119735][ T4166] device veth0_vlan entered promiscuous mode [ 76.137658][ T4166] device veth1_vlan entered promiscuous mode [ 76.144803][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.153202][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.161197][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.188323][ T4167] device veth1_macvtap entered promiscuous mode [ 76.204136][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.222545][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.237685][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.252075][ T4173] device veth0_macvtap entered promiscuous mode [ 76.270778][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.283170][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.294251][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.305233][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.317719][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.325110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.333771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.342327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.351489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.361453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.370601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.376602][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 76.379637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.391496][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 76.394415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.407876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.419562][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.430432][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.442130][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.452838][ T4173] device veth1_macvtap entered promiscuous mode [ 76.456520][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 76.466952][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 76.478292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.486785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.490467][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 76.503144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.527883][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.540627][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.552868][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.563869][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.575528][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.608430][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.610412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.622470][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.629070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.641471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.651078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.660016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.670694][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.679610][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.688630][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.698100][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.709562][ T4166] device veth0_macvtap entered promiscuous mode [ 76.719800][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.728998][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.739153][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748187][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.798732][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.810163][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.820513][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.831350][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.841573][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.852141][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.864853][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.873494][ T4166] device veth1_macvtap entered promiscuous mode [ 76.894951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.903429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.912114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.924107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.935063][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.947197][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.957923][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.968661][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.979202][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.990143][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.002849][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.038057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.049826][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.057521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.062883][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.075296][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.085460][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.094779][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.106389][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.121817][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.132504][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.143073][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.153898][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.164128][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.174896][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.185915][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.196546][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.208455][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.228187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.244758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.255804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.282064][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.295314][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.307935][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.318837][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.328713][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.340114][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.350098][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.360863][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.372970][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.408052][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.423395][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.432837][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.441983][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467456][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.479361][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.537372][ T3088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.545368][ T3088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.573642][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.589514][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.602443][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.639020][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.698498][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.709954][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.731234][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.772926][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.786891][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.816989][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.824985][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.859395][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.880383][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.890039][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.917082][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.942584][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.014635][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.029703][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.138075][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.147437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.159277][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.172742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.434132][ T4266] loop0: detected capacity change from 0 to 128 [ 78.458574][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 78.466741][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 78.525615][ T4266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 78.536706][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 78.555874][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 78.579895][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 78.601107][ T4266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.643742][ T4274] 9pnet: Insufficient options for proto=fd [ 79.302550][ T4290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.155241][ T4328] xt_hashlimit: max too large, truncated to 1048576 [ 80.209326][ T4336] process 'syz.2.38' launched '/dev/fd/-1' with NULL argv: empty string added [ 80.355340][ T4339] loop1: detected capacity change from 0 to 256 [ 80.418362][ T4339] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.513549][ T4349] loop4: detected capacity change from 0 to 256 [ 80.556236][ T4349] exfat: Deprecated parameter 'utf8' [ 80.623455][ T4349] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 80.642423][ T4355] loop1: detected capacity change from 0 to 512 [ 80.723719][ T4355] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.802573][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.904945][ T4355] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.48: corrupted inode contents [ 80.927154][ T4355] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.48: mark_inode_dirty error [ 80.947750][ T4355] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.48: corrupted inode contents [ 80.960896][ T4355] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.48: mark_inode_dirty error [ 80.974419][ T4355] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.48: corrupted inode contents [ 80.990446][ T4355] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 80.999987][ T4355] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.48: corrupted inode contents [ 81.012567][ T4355] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.48: mark_inode_dirty error [ 81.048043][ T4355] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 81.072007][ T4355] EXT4-fs (loop1): 1 truncate cleaned up [ 81.101151][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.152028][ T4355] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.216448][ T4375] loop3: detected capacity change from 0 to 1024 [ 81.446671][ T4384] loop2: detected capacity change from 0 to 256 [ 81.462742][ T144] hfsplus: b-tree write err: -5, ino 8 [ 81.535630][ T4384] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 81.922180][ T4396] loop1: detected capacity change from 0 to 8 [ 82.038445][ T4396] SQUASHFS error: lzo decompression failed, data probably corrupt [ 82.056274][ T4396] SQUASHFS error: Failed to read block 0x91: -5 [ 82.072544][ T4396] SQUASHFS error: Unable to read metadata cache entry [8f] [ 82.093278][ T4396] SQUASHFS error: Unable to read inode 0x11f [ 83.323680][ T4407] sched: RT throttling activated [ 83.725291][ T4412] loop4: detected capacity change from 0 to 1024 [ 84.426775][ T4412] hfsplus: can't free extent [ 85.686674][ T4466] device batadv_slave_0 entered promiscuous mode [ 85.718193][ T4466] device batadv_slave_1 entered promiscuous mode [ 85.762548][ T4465] device batadv_slave_1 left promiscuous mode [ 85.780770][ T4465] device batadv_slave_0 left promiscuous mode [ 85.837414][ T4470] xt_hashlimit: max too large, truncated to 1048576 [ 85.912979][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.185713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.194727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.203782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 86.212784][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 86.221767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 86.230750][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 86.239726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 86.248705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 86.257680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 86.266655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 86.433943][ T4490] loop1: detected capacity change from 0 to 128 [ 86.500242][ T4490] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 86.566278][ T4496] loop4: detected capacity change from 0 to 1024 [ 86.742943][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.792737][ T1108] cfg80211: failed to load regulatory.db [ 86.824547][ T4496] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.105: bg 0: block 376: padding at end of block bitmap is not set [ 88.215015][ T4518] loop4: detected capacity change from 0 to 512 [ 88.292313][ T4520] loop3: detected capacity change from 0 to 1024 [ 88.356563][ T4520] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 88.469256][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 88.525275][ T4518] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.920299][ T4543] loop2: detected capacity change from 0 to 1024 [ 88.953674][ T4547] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 89.154889][ T4543] ======================================================= [ 89.154889][ T4543] WARNING: The mand mount option has been deprecated and [ 89.154889][ T4543] and is ignored by this kernel. Remove the mand [ 89.154889][ T4543] option from the mount to silence this warning. [ 89.154889][ T4543] ======================================================= [ 89.523005][ T4543] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002] [ 89.735435][ T4543] System zones: 0-1, 3-36 [ 89.980310][ T4543] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000002,lazytime,usrquota,debug,data_err=abort,,errors=continue. Quota mode: writeback. [ 91.137825][ T4578] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 93.104377][ T4612] 9p: Unknown uid 18446744073709551615 [ 93.136053][ T4216] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.506777][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 93.540053][ T4216] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 93.576324][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.610476][ T4216] usb 3-1: config 0 descriptor?? [ 93.657917][ T4580] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.661048][ T4635] loop4: detected capacity change from 0 to 1024 [ 93.803680][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.878223][ T4645] 9p: Unknown uid 18446744073709551615 [ 94.034631][ T4650] xt_hashlimit: max too large, truncated to 1048576 [ 94.052664][ T4651] loop1: detected capacity change from 0 to 1024 [ 94.064224][ T4650] syz.3.157[4650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.064299][ T4650] syz.3.157[4650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.111869][ T4651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.145902][ T4216] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 94.371846][ T4216] usb 3-1: USB disconnect, device number 2 [ 94.530229][ T4665] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 94.538965][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 94.585457][ T4667] 9p: Unknown uid 18446744073709551615 [ 94.736407][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.752807][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.255958][ T4247] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 95.592240][ T4247] usb 3-1: not running at top speed; connect to a high speed hub [ 95.662246][ T4695] 9p: Unknown uid 18446744073709551615 [ 95.692203][ T4247] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.702587][ T4247] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.717318][ T4247] usb 3-1: config 1 has no interface number 1 [ 95.741790][ T4247] usb 3-1: config 1 interface 2 has no altsetting 0 [ 95.789085][ T4703] capability: warning: `syz.0.178' uses deprecated v2 capabilities in a way that may be insecure [ 95.841318][ T4704] loop1: detected capacity change from 0 to 256 [ 95.883563][ T4707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 95.907097][ T4210] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.912785][ T4247] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.924815][ T4704] exfat: Bad value for 'uid' [ 95.941332][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.963384][ T4247] usb 3-1: Product: syz [ 95.969437][ T4247] usb 3-1: Manufacturer: syz [ 95.974256][ T4247] usb 3-1: SerialNumber: syz [ 96.295917][ T4210] usb 4-1: Using ep0 maxpacket: 16 [ 96.487703][ T4247] usb 3-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 96.615385][ T4247] usb 3-1: selecting invalid altsetting 0 [ 96.796774][ T4247] usb 3-1: failed to enable PITCH for EP 0x82 [ 96.988158][ T4247] usb 3-1: selecting invalid altsetting 0 [ 97.133638][ T4721] loop1: detected capacity change from 0 to 256 [ 97.205957][ T4210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.224208][ T4247] usb 3-1: USB disconnect, device number 3 [ 97.295117][ T4726] loop2: detected capacity change from 0 to 512 [ 97.301740][ T4210] usb 4-1: config 8 has an invalid interface number: 179 but max is 1 [ 97.331615][ T4210] usb 4-1: config 8 has an invalid interface number: 233 but max is 1 [ 97.350191][ T4210] usb 4-1: config 8 has no interface number 0 [ 97.362899][ T4210] usb 4-1: config 8 has no interface number 1 [ 97.374408][ T4726] EXT4-fs (loop2): Ignoring removed orlov option [ 97.405876][ T4210] usb 4-1: config 8 interface 179 has no altsetting 0 [ 97.412708][ T4210] usb 4-1: config 8 interface 233 has no altsetting 0 [ 97.462775][ T4726] EXT4-fs (loop2): 1 orphan inode deleted [ 97.476860][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x000000000000ed55,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 97.508486][ T4726] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.589708][ T4727] udevd[4727]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.616345][ T4210] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=84.7c [ 97.627657][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.628724][ T4736] 9p: Unknown uid 18446744073709551615 [ 97.655850][ T4210] usb 4-1: Product: syz [ 97.660222][ T4210] usb 4-1: Manufacturer: syz [ 97.664855][ T4210] usb 4-1: SerialNumber: syz [ 97.868437][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 97.908218][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 97.959306][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 98.038215][ T4758] loop4: detected capacity change from 0 to 256 [ 98.127418][ T4210] qmi_wwan: probe of 4-1:8.179 failed with error -22 [ 98.142550][ T4758] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.180460][ T4758] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 98.199915][ T4210] usb 4-1: USB disconnect, device number 2 [ 98.251391][ T4758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.594585][ T4769] loop1: detected capacity change from 0 to 1024 [ 98.597821][ T4770] 9p: Unknown uid 18446744073709551615 [ 98.756797][ T4769] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 100.152198][ T4795] 9p: Unknown uid 18446744073709551615 [ 100.709881][ T4823] kvm: emulating exchange as write [ 101.035448][ T4831] 9p: Unknown uid 18446744073709551615 [ 101.234397][ T4836] loop2: detected capacity change from 0 to 1024 [ 101.342620][ T4836] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 101.372163][ T4836] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.443906][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,barrier,sysvgroups,discard,dioread_nolock,stripe=0x0000000000000004,dioread_nolock,noauto_da_alloc,nomblk_io_submit,bsdgroups,,errors=continue. Quota mode: none. [ 101.790929][ T4844] Zero length message leads to an empty skb [ 101.810727][ T4844] 9pnet: Insufficient options for proto=fd [ 101.919604][ T4857] loop4: detected capacity change from 0 to 256 [ 102.097902][ T4857] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39635552, utbl_chksum : 0xe619d30d) [ 102.233451][ T4857] attempt to access beyond end of device [ 102.233451][ T4857] loop4: rw=524288, want=34359738504, limit=256 [ 102.263018][ T4857] attempt to access beyond end of device [ 102.263018][ T4857] loop4: rw=0, want=34359738496, limit=256 [ 102.294625][ T4870] 9p: Unknown uid 18446744073709551615 [ 102.337270][ T4872] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.414037][ T4872] CIFS mount error: No usable UNC path provided in device string! [ 102.414037][ T4872] [ 102.444859][ T4874] loop1: detected capacity change from 0 to 8 [ 102.463128][ T4872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 102.476849][ T4874] squashfs: Unknown parameter '' [ 102.502183][ T4879] xt_hashlimit: max too large, truncated to 1048576 [ 102.579680][ T4874] loop1: detected capacity change from 0 to 256 [ 102.616472][ T4879] syz.4.245[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.616585][ T4879] syz.4.245[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.622894][ T4886] loop2: detected capacity change from 0 to 764 [ 102.878331][ T4893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 102.982435][ T4896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.553575][ T4918] loop1: detected capacity change from 0 to 4096 [ 105.704678][ T4247] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.750011][ T4918] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.765787][ T4918] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 105.862314][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 106.099724][ T4952] loop4: detected capacity change from 0 to 512 [ 106.288898][ T4952] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 106.311495][ T4965] loop1: detected capacity change from 0 to 128 [ 106.380740][ T4952] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.429185][ T4969] loop2: detected capacity change from 0 to 512 [ 106.574399][ T4969] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 106.637216][ T4969] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000007,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 106.874241][ T4977] loop4: detected capacity change from 0 to 2048 [ 106.896259][ T4981] loop1: detected capacity change from 0 to 2048 [ 106.942566][ T4977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.034549][ T4981] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.091276][ T4992] loop2: detected capacity change from 0 to 128 [ 107.185380][ T4981] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.259679][ T4981] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 107.296924][ T4981] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.296924][ T4981] [ 107.329353][ T4981] EXT4-fs (loop1): Total free blocks count 0 [ 107.358294][ T4981] EXT4-fs (loop1): Free/Dirty block details [ 107.391918][ T4981] EXT4-fs (loop1): free_blocks=2415919104 [ 107.410997][ T4981] EXT4-fs (loop1): dirty_blocks=16 [ 107.426578][ T4981] EXT4-fs (loop1): Block reservation details [ 107.446697][ T4996] loop4: detected capacity change from 0 to 1024 [ 107.448692][ T4981] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 107.522302][ T4993] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 107.556465][ T4993] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.556465][ T4993] [ 107.594811][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.849786][ T5007] loop2: detected capacity change from 0 to 256 [ 108.033071][ T5007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.122262][ T5007] 9pnet: p9_fd_create_unix (5007): problem connecting socket: ./file0: -13 [ 108.564574][ T5028] loop2: detected capacity change from 0 to 512 [ 108.795094][ T5028] loop2: detected capacity change from 0 to 1024 [ 108.953432][ T5028] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.300: Invalid block bitmap block 0 in block_group 0 [ 108.970756][ T5028] Quota error (device loop2): write_blk: dquota write failed [ 108.978742][ T5028] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.989799][ T5028] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.300: Failed to acquire dquot type 0 [ 109.012025][ T5028] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.300: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.032835][ T5028] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.300: Invalid inode bitmap blk 0 in block_group 0 [ 109.054190][ T5028] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 109.064168][ T5028] EXT4-fs (loop2): 1 orphan inode deleted [ 109.070090][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 109.311040][ T5028] syz.2.300 (5028) used greatest stack depth: 19576 bytes left [ 109.380918][ T144] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 109.425845][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6227: comm kworker/u4:1: Failed to release dquot type 0 [ 109.736895][ T5033] xt_hashlimit: max too large, truncated to 1048576 [ 109.769005][ T5034] loop4: detected capacity change from 0 to 1024 [ 109.861031][ T5036] syz.1.304[5036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.861135][ T5036] syz.1.304[5036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.287348][ T5044] loop4: detected capacity change from 0 to 8 [ 110.711066][ T5046] loop1: detected capacity change from 0 to 512 [ 110.856129][ T5046] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 110.894011][ T5046] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 110.936622][ T5046] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.308: attempt to clear invalid blocks 2 len 1 [ 111.039609][ T5046] EXT4-fs (loop1): Remounting filesystem read-only [ 111.051725][ T5046] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.073720][ T5046] EXT4-fs (loop1): Remounting filesystem read-only [ 111.095981][ T5046] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.308: invalid indirect mapped block 1819239214 (level 0) [ 111.192346][ T5046] EXT4-fs (loop1): Remounting filesystem read-only [ 111.209325][ T5046] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.308: invalid indirect mapped block 1819239214 (level 1) [ 111.470583][ T5046] EXT4-fs (loop1): Remounting filesystem read-only [ 111.520100][ T5046] EXT4-fs (loop1): 1 truncate cleaned up [ 111.628681][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 112.172795][ T5046] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 112.483724][ T5070] loop1: detected capacity change from 0 to 16 [ 112.588314][ T5070] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.030438][ T1108] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.446129][ T1108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 113.656011][ T1108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.675463][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.694345][ T1108] usb 3-1: Product: syz [ 113.725274][ T1108] usb 3-1: Manufacturer: syz [ 113.764948][ T1108] usb 3-1: SerialNumber: syz [ 113.910240][ T5103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.109495][ T5076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.422766][ T4247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.665961][ T4247] usb 5-1: Using ep0 maxpacket: 32 [ 114.763232][ T5110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'. [ 114.786059][ T4247] usb 5-1: config index 0 descriptor too short (expected 99, got 36) [ 114.804588][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.865806][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.932420][ T4247] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.995781][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.117345][ T4247] usb 5-1: config 0 descriptor?? [ 115.157143][ T4247] hub 5-1:0.0: USB hub found [ 115.425911][ T4217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.675868][ T4247] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 115.746709][ T4247] usb 5-1: USB disconnect, device number 2 [ 115.810516][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.862942][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.876136][ T1108] cdc_ncm 3-1:1.0: bind() failure [ 115.902531][ T5132] loop2: detected capacity change from 0 to 128 [ 115.906542][ T1108] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 115.915760][ T4217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.917782][ T1108] cdc_ncm 3-1:1.1: bind() failure [ 115.942928][ T4217] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.969434][ T1108] usb 3-1: USB disconnect, device number 4 [ 115.975818][ T5132] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 115.984119][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.002432][ T5132] EXT4-fs (loop2): Unrecognized mount option "dont_appraise" or missing value [ 116.020312][ T4217] usb 2-1: config 0 descriptor?? [ 116.157938][ T5132] loop2: detected capacity change from 0 to 256 [ 116.271110][ T5132] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.311567][ T5132] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.507777][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.539114][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.563314][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.579000][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.613607][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.632333][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.673726][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.712622][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.744126][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.781606][ T4217] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.806427][ T4217] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 116.881590][ T4217] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 116.943025][ T4217] usb 2-1: USB disconnect, device number 2 [ 117.107409][ T5171] loop2: detected capacity change from 0 to 16 [ 117.114873][ T5172] CIFS mount error: No usable UNC path provided in device string! [ 117.114873][ T5172] [ 117.128727][ T5172] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 117.180003][ T5171] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.551066][ T5179] loop1: detected capacity change from 0 to 1024 [ 117.671649][ T5179] EXT4-fs (loop1): Ignoring removed nobh option [ 117.695414][ T5179] EXT4-fs (loop1): Ignoring removed bh option [ 117.735766][ T5179] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.750258][ T5181] netlink: 56 bytes leftover after parsing attributes in process `syz.4.361'. [ 117.781453][ T5181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.361'. [ 117.808183][ T5181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.361'. [ 117.833241][ T5179] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.919036][ T5192] xt_hashlimit: max too large, truncated to 1048576 [ 118.145376][ T5179] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.360: Allocating blocks 497-513 which overlap fs metadata [ 118.197641][ T5209] CIFS mount error: No usable UNC path provided in device string! [ 118.197641][ T5209] [ 118.233519][ T5209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.712249][ T5226] loop4: detected capacity change from 0 to 8192 [ 118.998408][ T5234] loop2: detected capacity change from 0 to 512 [ 119.308652][ T5234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.326459][ T26] audit: type=1800 audit(1744385348.240:2): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.378" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 119.611289][ T5234] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.682477][ T5234] EXT4-fs (loop2): 1 truncate cleaned up [ 119.719679][ T5234] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,. Quota mode: writeback. [ 119.764892][ T5248] CIFS mount error: No usable UNC path provided in device string! [ 119.764892][ T5248] [ 119.787093][ T5248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.828869][ T26] audit: type=1804 audit(1744385348.950:3): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.380" name="/newroot/67/file2/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 119.955509][ T5254] loop4: detected capacity change from 0 to 512 [ 119.967736][ T5257] netlink: 'syz.0.385': attribute type 16 has an invalid length. [ 120.013055][ T5258] xt_hashlimit: max too large, truncated to 1048576 [ 120.024947][ T5257] netlink: 'syz.0.385': attribute type 17 has an invalid length. [ 120.043236][ T5254] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.068983][ T5254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.120726][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.135233][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.183787][ T5254] EXT4-fs (loop4): 1 truncate cleaned up [ 120.190785][ T5257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.196921][ T5254] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,nombcache,,errors=continue. Quota mode: writeback. [ 120.451394][ T5254] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz.4.387: Siphash requires key [ 120.732447][ T5274] loop4: detected capacity change from 0 to 256 [ 120.805802][ T5274] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 120.848004][ T5282] CIFS mount error: No usable UNC path provided in device string! [ 120.848004][ T5282] [ 120.878689][ T5282] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.022293][ T5288] loop1: detected capacity change from 0 to 256 [ 121.075780][ T4216] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.205410][ T5294] loop4: detected capacity change from 0 to 2048 [ 121.282495][ T5294] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 121.304621][ T5294] UDF-fs: Scanning with blocksize 512 failed [ 121.325295][ T5294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.338666][ T4216] usb 3-1: Using ep0 maxpacket: 32 [ 121.382433][ T26] audit: type=1800 audit(1744385350.500:4): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 121.490243][ T5307] CIFS mount error: No usable UNC path provided in device string! [ 121.490243][ T5307] [ 121.496055][ T4216] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.515485][ T5307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.735816][ T4216] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 121.754547][ T4216] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 121.801177][ T4216] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 122.023174][ T5318] netlink: 'syz.4.413': attribute type 3 has an invalid length. [ 122.368990][ T4216] usb 3-1: config 128 has no interface number 0 [ 122.375307][ T4216] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 122.395787][ T5318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.413'. [ 122.454498][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 122.495797][ T4216] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.506523][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 122.567469][ T4216] usb 3-1: config 128 interface 127 has no altsetting 0 [ 122.756098][ T4216] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 122.805821][ T4216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.836414][ T4216] usb 3-1: Product: syz [ 122.840648][ T4216] usb 3-1: Manufacturer: syz [ 122.845250][ T4216] usb 3-1: SerialNumber: syz [ 123.222407][ T5341] CIFS mount error: No usable UNC path provided in device string! [ 123.222407][ T5341] [ 123.240039][ T5341] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.355955][ T4216] usb 3-1: USB disconnect, device number 5 [ 123.394556][ T4739] udevd[4739]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.482643][ T5343] loop4: detected capacity change from 0 to 1024 [ 123.739356][ T5343] hfsplus: xattr searching failed [ 124.076709][ T5370] CIFS mount error: No usable UNC path provided in device string! [ 124.076709][ T5370] [ 124.114804][ T5370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.120854][ T5373] loop1: detected capacity change from 0 to 1024 [ 124.510484][ T5387] loop1: detected capacity change from 0 to 8 [ 124.589916][ T5387] squashfs: Unknown parameter '' [ 124.645820][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.712548][ T5387] loop1: detected capacity change from 0 to 256 [ 125.247386][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 125.310450][ T5402] CIFS mount error: No usable UNC path provided in device string! [ 125.310450][ T5402] [ 125.352445][ T5402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.374704][ T1108] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 125.395747][ T1108] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 125.415727][ T1108] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.425205][ T1108] usb 3-1: config 1 has no interface number 1 [ 125.487406][ T1108] usb 3-1: too many endpoints for config 1 interface 6 altsetting 0: 36, using maximum allowed: 30 [ 125.509721][ T1108] usb 3-1: config 1 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 125.861870][ T5414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.935968][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.975086][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.030073][ T1108] usb 3-1: Product: syz [ 126.067767][ T1108] usb 3-1: Manufacturer: syz [ 126.093858][ T1108] usb 3-1: SerialNumber: syz [ 126.501543][ T5428] loop4: detected capacity change from 0 to 8 [ 126.514291][ T1108] usb 3-1: 0:2 : does not exist [ 126.547804][ T1108] hub 3-1:1.6: Invalid hub with more than one config or interface [ 126.563171][ T1108] hub: probe of 3-1:1.6 failed with error -22 [ 126.603264][ T1108] usb 3-1: USB disconnect, device number 6 [ 126.653649][ T4739] udevd[4739]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.938798][ T5428] squashfs: Unknown parameter '' [ 127.081425][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 127.342062][ T5438] loop1: detected capacity change from 0 to 8 [ 127.406624][ T5438] squashfs: Unknown parameter '' [ 127.526497][ T5438] loop1: detected capacity change from 0 to 256 [ 128.607333][ T5461] loop4: detected capacity change from 0 to 8 [ 128.709853][ T5461] squashfs: Unknown parameter '' [ 128.771290][ T5461] loop4: detected capacity change from 0 to 256 [ 128.988532][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 129.200029][ T5490] loop1: detected capacity change from 0 to 1024 [ 129.299257][ T5496] loop2: detected capacity change from 0 to 2048 [ 129.352373][ T5490] hfsplus: invalid btree extent records (0 size) [ 129.392279][ T5500] loop4: detected capacity change from 0 to 256 [ 129.395354][ T5490] hfsplus: failed to load attributes file [ 129.432602][ T5496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.587525][ T5505] loop1: detected capacity change from 0 to 8 [ 129.602290][ T5505] squashfs: Unknown parameter '' [ 129.700549][ T5505] loop1: detected capacity change from 0 to 256 [ 129.775958][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.039122][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 130.105086][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.216364][ T1108] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.236266][ T1108] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.439351][ T1108] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.468960][ T1108] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 130.518669][ T1108] usb 3-1: Product: syz [ 130.535692][ T1108] usb 3-1: Manufacturer: syz [ 130.627210][ T1108] hub 3-1:4.0: USB hub found [ 130.847054][ T1108] hub 3-1:4.0: 2 ports detected [ 131.196213][ T1108] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 131.211365][ T1108] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 131.314689][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.326749][ T1108] usb 3-1: USB disconnect, device number 7 [ 131.375314][ T5537] loop4: detected capacity change from 0 to 164 [ 131.436958][ T5537] Unable to read rock-ridge attributes [ 131.480811][ T5537] Unable to read rock-ridge attributes [ 131.722088][ T5549] kernel profiling enabled (shift: 63) [ 131.724617][ T5546] loop1: detected capacity change from 0 to 2048 [ 131.763442][ T5549] profiling shift: 63 too large [ 131.916401][ T5546] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 131.954205][ T5554] loop2: detected capacity change from 0 to 8 [ 132.005131][ T5562] loop4: detected capacity change from 0 to 764 [ 132.012261][ T5554] squashfs: Unknown parameter '' [ 132.511333][ T5572] loop4: detected capacity change from 0 to 8 [ 132.570119][ T5574] loop1: detected capacity change from 0 to 1024 [ 132.669515][ T5574] EXT4-fs (loop1): Ignoring removed bh option [ 132.692399][ T5572] squashfs: Unknown parameter '' [ 132.715590][ T5574] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.813318][ T5574] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,discard,grpquota,dioread_lock,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 133.697287][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.704910][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.720680][ T5572] loop4: detected capacity change from 0 to 256 [ 134.172450][ T5593] loop4: detected capacity change from 0 to 128 [ 134.183223][ T5594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 134.216613][ T5594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'. [ 134.354251][ T5598] loop2: detected capacity change from 0 to 512 [ 134.449761][ T5598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.495259][ T5598] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.504529][ T5608] loop4: detected capacity change from 0 to 8 [ 134.677742][ T5608] squashfs: Unknown parameter '' [ 135.359344][ T5608] loop4: detected capacity change from 0 to 256 [ 135.537041][ T5617] loop1: detected capacity change from 0 to 1024 [ 135.826338][ T4255] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.876865][ T4255] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.887499][ T5628] loop4: detected capacity change from 0 to 2048 [ 135.961493][ T5628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.613274][ T5651] loop1: detected capacity change from 0 to 1024 [ 136.684316][ T5654] loop4: detected capacity change from 0 to 8 [ 136.758682][ T5654] squashfs: Unknown parameter '' [ 136.766191][ T5651] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.792443][ T5630] loop2: detected capacity change from 0 to 512 [ 136.813275][ T5651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.837081][ T5651] EXT4-fs warning (device loop1): ext4_enable_quotas:6439: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 136.856068][ T5651] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 136.863162][ T5651] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.555: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.921241][ T5654] loop4: detected capacity change from 0 to 256 [ 136.972639][ T5651] EXT4-fs (loop1): Remounting filesystem read-only [ 136.994021][ T5651] EXT4-fs (loop1): 1 orphan inode deleted [ 137.025579][ T5651] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000313b,init_itable,errors=remount-ro,grpid,. Quota mode: writeback. [ 137.171985][ T5651] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.555: iget: bad extended attribute block 6 [ 137.223825][ T5661] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.555: iget: bad extended attribute block 6 [ 137.383470][ T5665] loop4: detected capacity change from 0 to 1024 [ 137.696085][ T5673] loop2: detected capacity change from 0 to 512 [ 138.250741][ T5673] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.564: casefold flag without casefold feature [ 138.620770][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.686367][ T5673] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.564: couldn't read orphan inode 15 (err -117) [ 138.797028][ T5673] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.976267][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 139.106469][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 139.312280][ T7] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 139.332009][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.358263][ T7] usb 5-1: Product: syz [ 139.371916][ T7] usb 5-1: Manufacturer: syz [ 139.384683][ T7] usb 5-1: SerialNumber: syz [ 139.415266][ T7] usb 5-1: config 0 descriptor?? [ 139.627271][ T7] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 139.675329][ T4739] udevd[4739]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.768119][ T5665] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 139.806471][ T5708] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 139.846146][ T7] usb 5-1: USB disconnect, device number 3 [ 140.124067][ T5721] loop1: detected capacity change from 0 to 512 [ 140.449895][ T5721] loop1: detected capacity change from 0 to 1024 [ 140.671627][ T5721] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.580: Invalid block bitmap block 0 in block_group 0 [ 140.707254][ T5721] Quota error (device loop1): write_blk: dquota write failed [ 140.714792][ T5721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 140.803370][ T5721] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.580: Failed to acquire dquot type 0 [ 140.862712][ T5721] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.580: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.942853][ T5721] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.580: Invalid inode bitmap blk 0 in block_group 0 [ 140.965086][ T4512] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 140.978573][ T4512] EXT4-fs error (device loop1): ext4_release_dquot:6227: comm kworker/u4:8: Failed to release dquot type 0 [ 141.048514][ T5721] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 141.095030][ T5721] EXT4-fs (loop1): 1 orphan inode deleted [ 141.111105][ T5721] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 142.094956][ T5763] loop2: detected capacity change from 0 to 16 [ 142.213004][ T5721] syz.1.580 (5721) used greatest stack depth: 19392 bytes left [ 142.348085][ T5768] loop4: detected capacity change from 0 to 8 [ 143.039606][ T5768] squashfs: Unknown parameter '' [ 143.062340][ T5763] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.137629][ T5768] loop4: detected capacity change from 0 to 256 [ 143.713445][ T5785] kvm [5783]: vcpu0, guest rIP: 0x24e disabled perfctr wrmsr: 0xc1 data 0x8b9 [ 143.747408][ T5785] kvm [5783]: vcpu0, guest rIP: 0x24e ignored wrmsr: 0x11e data 0xe1 [ 143.775563][ T5785] kvm [5783]: vcpu0, guest rIP: 0x24e disabled perfctr wrmsr: 0x187 data 0x8b9 [ 144.372550][ T5806] xt_hashlimit: max too large, truncated to 1048576 [ 144.456687][ T5811] syz.0.618[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.456786][ T5811] syz.0.618[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.550898][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.613565][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.255370][ T5843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 145.292681][ T5846] loop4: detected capacity change from 0 to 256 [ 145.356481][ T5846] exfat: Deprecated parameter 'utf8' [ 145.361950][ T5846] exfat: Deprecated parameter 'utf8' [ 145.382080][ T5846] exfat: Deprecated parameter 'utf8' [ 145.443754][ T5846] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 145.623872][ T5862] loop2: detected capacity change from 0 to 512 [ 145.790630][ T5862] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.865149][ T5869] loop4: detected capacity change from 0 to 8 [ 146.728561][ T5862] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 146.741492][ T5869] SQUASHFS error: lzo decompression failed, data probably corrupt [ 146.750587][ T5862] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.638: invalid indirect mapped block 2683928664 (level 1) [ 146.767478][ T5869] SQUASHFS error: Failed to read block 0x144: -5 [ 146.774398][ T5862] EXT4-fs (loop2): Remounting filesystem read-only [ 146.775884][ T5869] SQUASHFS error: Unable to read metadata cache entry [142] [ 146.783390][ T5862] EXT4-fs (loop2): 1 truncate cleaned up [ 146.794735][ T5862] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 146.811694][ T5874] xt_hashlimit: max too large, truncated to 1048576 [ 146.847681][ T5875] syz.3.642[5875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.847753][ T5875] syz.3.642[5875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.892489][ T5869] SQUASHFS error: Unable to read directory block [142:26] [ 147.010349][ T4173] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 147.107441][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 147.116439][ T5877] loop4: detected capacity change from 0 to 512 [ 147.135615][ T4173] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 147.214293][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 147.235895][ T4173] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 147.254786][ T5877] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 147.270324][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 147.290539][ T4173] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 147.301482][ T5877] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.319254][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 147.350232][ T4173] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 147.369787][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 147.495823][ T5871] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 147.577670][ T5871] EXT4-fs (loop2): Remounting filesystem read-only [ 147.865813][ T4173] syz-executor (4173) used greatest stack depth: 19352 bytes left [ 147.921665][ T4235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.955804][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.062498][ T4235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.191276][ T4235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.201871][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 148.230270][ T5908] loop1: detected capacity change from 0 to 512 [ 148.265924][ T4235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.327191][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.343367][ T5908] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.659: casefold flag without casefold feature [ 148.351656][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.374808][ T5908] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.659: couldn't read orphan inode 15 (err -117) [ 148.378150][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.506394][ T5908] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 149.254729][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 149.573880][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.583143][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.601152][ T13] usb 5-1: config 0 descriptor?? [ 149.772621][ T5956] loop1: detected capacity change from 0 to 1024 [ 149.976006][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.983207][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.032944][ T5913] device bridge_slave_0 entered promiscuous mode [ 150.174690][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.237969][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.305606][ T5913] device bridge_slave_1 entered promiscuous mode [ 150.456140][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 150.695613][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.796321][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.157563][ T5913] team0: Port device team_slave_0 added [ 151.236958][ T5913] team0: Port device team_slave_1 added [ 151.275220][ T5993] loop1: detected capacity change from 0 to 1024 [ 151.336128][ T13] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 151.350873][ T13] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 151.361441][ T13] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 151.377473][ T13] microsoft 0003:045E:07DA.0005: no inputs found [ 151.383847][ T13] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 151.414803][ T13] usb 5-1: USB disconnect, device number 4 [ 151.458128][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.490491][ T5993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.506016][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.676759][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.039620][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.234150][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.394949][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 153.402412][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.686764][ T5913] device hsr_slave_0 entered promiscuous mode [ 153.703997][ T5913] device hsr_slave_1 entered promiscuous mode [ 153.721196][ T5913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.735809][ T5913] Cannot create hsr debugfs directory [ 153.956647][ T6041] loop4: detected capacity change from 0 to 1024 [ 154.183204][ T4215] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 154.411506][ T5913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.433284][ T5913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.830469][ T5913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.837820][ T4215] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 154.875774][ T4215] usb 2-1: config 0 has no interface number 0 [ 154.905758][ T4215] usb 2-1: config 0 interface 240 has no altsetting 0 [ 154.952802][ T6067] loop4: detected capacity change from 0 to 512 [ 154.966123][ T4215] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice=4e.3d [ 154.975398][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.091181][ T4215] usb 2-1: config 0 descriptor?? [ 155.100767][ T6067] loop4: detected capacity change from 0 to 1024 [ 155.147456][ T4215] option 2-1:0.240: GSM modem (1-port) converter detected [ 155.161038][ T5913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.189069][ T6067] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.703: Invalid block bitmap block 0 in block_group 0 [ 155.203078][ T6067] Quota error (device loop4): write_blk: dquota write failed [ 155.210683][ T6067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 155.221449][ T6067] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.703: Failed to acquire dquot type 0 [ 155.234177][ T6067] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.703: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.248286][ T6067] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.703: Invalid inode bitmap blk 0 in block_group 0 [ 155.262724][ T6067] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 155.272073][ T6067] EXT4-fs (loop4): 1 orphan inode deleted [ 155.278003][ T6067] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 155.291106][ T4558] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 155.316084][ T4558] EXT4-fs error (device loop4): ext4_release_dquot:6227: comm kworker/u4:9: Failed to release dquot type 0 [ 155.352358][ T1108] usb 2-1: USB disconnect, device number 3 [ 155.387192][ T1108] option 2-1:0.240: device disconnected [ 155.433600][ T4210] Bluetooth: hci3: command 0x040f tx timeout [ 157.623390][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 157.661290][ T6096] loop1: detected capacity change from 0 to 2048 [ 157.672237][ T4235] device hsr_slave_0 left promiscuous mode [ 157.696554][ T4235] device hsr_slave_1 left promiscuous mode [ 157.721674][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.763846][ T6096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.787491][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.821879][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.841323][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.876679][ T4235] device bridge_slave_1 left promiscuous mode [ 157.884888][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.951747][ T4235] device bridge_slave_0 left promiscuous mode [ 157.983229][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.187782][ T6118] loop1: detected capacity change from 0 to 512 [ 159.368209][ T6118] loop1: detected capacity change from 0 to 1024 [ 159.448737][ T6118] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.719: Invalid block bitmap block 0 in block_group 0 [ 159.462592][ T6118] Quota error (device loop1): write_blk: dquota write failed [ 159.470080][ T6118] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 159.480108][ T6118] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.719: Failed to acquire dquot type 0 [ 159.492475][ T6118] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.719: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.506413][ T6118] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.719: Invalid inode bitmap blk 0 in block_group 0 [ 159.520577][ T6118] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 159.530039][ T6118] EXT4-fs (loop1): 1 orphan inode deleted [ 159.535875][ T6118] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 159.557739][ T4558] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 159.575097][ T4558] EXT4-fs error (device loop1): ext4_release_dquot:6227: comm kworker/u4:9: Failed to release dquot type 0 [ 159.592555][ T4235] device veth1_macvtap left promiscuous mode [ 159.626884][ T4235] device veth0_macvtap left promiscuous mode [ 159.697054][ T4235] device veth1_vlan left promiscuous mode [ 159.747284][ T4235] device veth0_vlan left promiscuous mode [ 160.348074][ T6132] loop4: detected capacity change from 0 to 1024 [ 160.454683][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.758739][ T6143] tmpfs: Bad value for 'size' [ 161.021799][ T6150] loop1: detected capacity change from 0 to 128 [ 161.071173][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 161.143685][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 161.202558][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.302377][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.515438][ T6163] loop1: detected capacity change from 0 to 2048 [ 161.862809][ T4235] bond0 (unregistering): Released all slaves [ 162.263838][ T6187] xt_hashlimit: max too large, truncated to 1048576 [ 162.645080][ T6163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.455960][ T6176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.463648][ T6176] IPv6: NLM_F_CREATE should be set when creating new route [ 163.649787][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.737307][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.757210][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.822395][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.807259][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.016843][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.056401][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.063706][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.083857][ T6222] xt_hashlimit: max too large, truncated to 1048576 [ 165.090709][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.225881][ T5913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.272587][ T5913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.628022][ T6227] IPv6: NLM_F_REPLACE set, but no existing node found! [ 166.749949][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.789985][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.837788][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.844929][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.924440][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.998017][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.063725][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.719177][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.825807][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.897194][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.949231][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.007246][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.387748][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.407913][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.433474][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.491239][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.622316][ T6248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.629605][ T6248] IPv6: NLM_F_CREATE should be set when creating new route [ 168.847836][ T6274] xt_hashlimit: max too large, truncated to 1048576 [ 168.854700][ T6272] loop4: detected capacity change from 0 to 164 [ 169.311553][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.323729][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.342733][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.770832][ T6308] loop4: detected capacity change from 0 to 512 [ 170.947468][ T6308] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000005" or missing value [ 171.044237][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.072609][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.217247][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.277256][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.372107][ T5913] device veth0_vlan entered promiscuous mode [ 171.411115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.440020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.478428][ T6336] xt_hashlimit: max too large, truncated to 1048576 [ 171.516584][ T6335] loop1: detected capacity change from 0 to 128 [ 171.543249][ T5913] device veth1_vlan entered promiscuous mode [ 171.563719][ T6335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 171.610399][ T6335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.672826][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.699891][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.743400][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.796571][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.824658][ T5913] device veth0_macvtap entered promiscuous mode [ 171.847249][ T5913] device veth1_macvtap entered promiscuous mode [ 171.927886][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.977966][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.006064][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.006985][ T6349] loop1: detected capacity change from 0 to 2048 [ 172.041207][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.062783][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.075192][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 172.087928][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.099800][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 172.109972][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.131940][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.181921][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.203425][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.217152][ T6349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.246381][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.272272][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.301844][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.337403][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.360350][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.436111][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.484874][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.495505][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.506350][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.516221][ T5913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.527380][ T5913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.538875][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.218307][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.252073][ T6367] loop4: detected capacity change from 0 to 8 [ 173.288177][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.331118][ T5913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.356261][ T5913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.370283][ T6374] loop1: detected capacity change from 0 to 512 [ 173.382606][ T5913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.401585][ T5913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.465168][ T6367] unable to read xattr id index table [ 173.470955][ T6374] EXT4-fs (loop1): Ignoring removed nobh option [ 174.383475][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.803: corrupted inode contents [ 174.519765][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 174.559634][ T6374] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.803: mark_inode_dirty error [ 174.575012][ T6390] loop4: detected capacity change from 0 to 256 [ 174.588386][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 174.610932][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 174.630312][ T6390] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.642060][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 174.688469][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.706824][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.803: corrupted inode contents [ 174.735187][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.741885][ T6390] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 175.053409][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 175.070296][ T6374] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.803: mark_inode_dirty error [ 176.163133][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.176508][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.217762][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.246779][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.803: corrupted inode contents [ 176.277269][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.379730][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.380172][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.393647][ T6374] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 176.405337][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.495746][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.803: corrupted inode contents [ 176.542732][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.566612][ T6374] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.803: mark_inode_dirty error [ 176.645872][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.654390][ T6374] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 176.719842][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 176.767637][ T6374] EXT4-fs (loop1): 1 truncate cleaned up [ 176.789428][ T6374] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 177.098946][ T6374] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.619322][ T6426] loop5: detected capacity change from 0 to 512 [ 177.727041][ T6430] loop4: detected capacity change from 0 to 1024 [ 178.360640][ T6426] loop5: detected capacity change from 0 to 1024 [ 178.481100][ T6430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.515932][ T6430] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.516499][ T6426] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.815: Invalid block bitmap block 0 in block_group 0 [ 178.541137][ T6426] Quota error (device loop5): write_blk: dquota write failed [ 178.549174][ T6426] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.559280][ T6426] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.815: Failed to acquire dquot type 0 [ 178.575304][ T6426] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.815: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.589913][ T6426] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.815: Invalid inode bitmap blk 0 in block_group 0 [ 178.603615][ T6426] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 178.612502][ T6426] EXT4-fs (loop5): 1 orphan inode deleted [ 178.614944][ T6448] netlink: 47 bytes leftover after parsing attributes in process `syz.1.818'. [ 178.618499][ T6426] EXT4-fs (loop5): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 178.650996][ T144] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 178.705817][ T144] EXT4-fs error (device loop5): ext4_release_dquot:6227: comm kworker/u4:1: Failed to release dquot type 0 [ 179.031548][ T6460] loop4: detected capacity change from 0 to 2048 [ 179.251384][ T6460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.492478][ T6514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.813100][ T6558] 9pnet: Insufficient options for proto=fd [ 190.518796][ T6602] 9pnet: Insufficient options for proto=fd [ 190.636090][ T4217] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.542223][ T6612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.326165][ T4217] usb 2-1: Using ep0 maxpacket: 32 [ 192.516526][ T4217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.675186][ T4217] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.485925][ T4217] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.495029][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.576895][ T4217] usb 2-1: Product: syz [ 193.616175][ T4217] usb 2-1: can't set config #1, error -71 [ 193.817290][ T4217] usb 2-1: USB disconnect, device number 4 [ 194.506206][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512535][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.764124][ T6652] 9pnet: Insufficient options for proto=fd [ 194.772471][ T6650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 196.198133][ T6663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.695864][ T4214] Bluetooth: hci2: command 0x0406 tx timeout [ 196.704102][ T4214] Bluetooth: hci1: command 0x0406 tx timeout [ 199.929111][ T6712] 9pnet: Insufficient options for proto=fd [ 201.389872][ T6729] loop5: detected capacity change from 0 to 256 [ 205.283545][ T6762] 9pnet: Insufficient options for proto=fd [ 206.506349][ T6789] mmap: syz.1.900 (6789) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 207.671308][ T6802] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 208.131005][ T6766] loop5: detected capacity change from 0 to 40427 [ 210.363886][ T6841] xt_hashlimit: max too large, truncated to 1048576 [ 215.587634][ T6893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 217.719443][ T6915] xt_hashlimit: max too large, truncated to 1048576 [ 218.093727][ T6925] loop1: detected capacity change from 0 to 4096 [ 218.206296][ T6925] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 220.189592][ T6947] loop4: detected capacity change from 0 to 40427 [ 220.302082][ T6947] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 220.339396][ T6947] F2FS-fs (loop4): invalid crc value [ 220.416927][ T6947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.455552][ T6947] F2FS-fs (loop4): recover fsync data on readonly fs [ 220.463940][ T6947] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 220.470660][ T6947] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 220.480622][ T6947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.925118][ T6953] loop5: detected capacity change from 0 to 32768 [ 222.082661][ T6953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.939 (6953) [ 223.191998][ T6967] loop1: detected capacity change from 0 to 32768 [ 223.463977][ T6953] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 223.528155][ T6953] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.608072][ T6953] BTRFS info (device loop5): use zstd compression, level 3 [ 223.621144][ T6997] syz.0.949 uses obsolete (PF_INET,SOCK_PACKET) [ 223.642104][ T6953] BTRFS info (device loop5): using free space tree [ 223.681068][ T6953] BTRFS info (device loop5): has skinny extents [ 224.851109][ T6953] BTRFS error (device loop5): open_ctree failed: -12 [ 226.859496][ T7054] loop4: detected capacity change from 0 to 8 [ 227.075658][ T7054] SQUASHFS error: xz decompression failed, data probably corrupt [ 227.083741][ T7054] SQUASHFS error: Failed to read block 0x108: -5 [ 227.090181][ T7054] SQUASHFS error: Unable to read metadata cache entry [106] [ 227.097595][ T7054] SQUASHFS error: Unable to read inode 0x11f [ 229.682610][ T7068] loop4: detected capacity change from 0 to 40427 [ 229.818766][ T7068] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 229.826644][ T7068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 229.838475][ T7068] F2FS-fs (loop4): invalid crc value [ 229.935167][ T7068] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.030659][ T7068] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 230.037894][ T7068] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.324895][ T7089] sp0: Synchronizing with TNC [ 231.003928][ T7086] [U] è [ 232.807425][ T26] audit: type=1326 audit(1744385461.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 234.613269][ T26] audit: type=1326 audit(1744385462.520:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 234.921629][ T26] audit: type=1326 audit(1744385462.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.104889][ T26] audit: type=1326 audit(1744385462.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.168982][ T4560] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 235.203174][ T26] audit: type=1326 audit(1744385462.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.244832][ T4560] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 235.345803][ T26] audit: type=1326 audit(1744385462.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.453326][ T26] audit: type=1326 audit(1744385464.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.474047][ T7108] loop5: detected capacity change from 0 to 8192 [ 235.486485][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.968'. [ 235.537610][ T26] audit: type=1326 audit(1744385464.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4516b7169 code=0x7ffc0000 [ 235.737612][ T7108] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 235.849299][ T7108] FAT-fs (loop5): Filesystem has been set read-only [ 238.697445][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 238.748649][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 238.853467][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 239.214247][ T7159] loop5: detected capacity change from 0 to 64 [ 239.727847][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 243.857288][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.992'. [ 243.873600][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 243.906654][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 244.018773][ T7210] loop4: detected capacity change from 0 to 16 [ 244.174483][ T7207] ksmbd: Unknown IPC event: 6, ignore. [ 244.840171][ T7210] erofs: (device loop4): mounted with root inode @ nid 36. [ 244.879723][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.990'. [ 248.308748][ T7241] loop1: detected capacity change from 0 to 262144 [ 248.433382][ T7241] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.1003 (7241) [ 248.509317][ T7241] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 248.518653][ T7241] BTRFS info (device loop1): using free space tree [ 248.525185][ T7241] BTRFS info (device loop1): has skinny extents [ 248.531513][ T7241] BTRFS info (device loop1): flagging fs with big metadata feature [ 248.695848][ T7052] Bluetooth: hci3: command 0x0405 tx timeout [ 248.835894][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1009'. [ 248.913908][ T7241] BTRFS info (device loop1): enabling ssd optimizations [ 248.931774][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 249.272080][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 249.314643][ T26] audit: type=1800 audit(1744385478.430:13): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1003" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 249.357910][ T7241] BTRFS error (device loop1): balance: reduces metadata redundancy, use --force if you want this [ 249.743085][ T26] audit: type=1326 audit(1744385478.860:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 249.981323][ T26] audit: type=1326 audit(1744385478.900:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 250.904102][ T26] audit: type=1326 audit(1744385478.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 251.269958][ T26] audit: type=1326 audit(1744385478.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 251.292541][ T26] audit: type=1326 audit(1744385478.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 252.797007][ T26] audit: type=1326 audit(1744385478.900:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 252.940491][ T26] audit: type=1326 audit(1744385478.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 253.086162][ T26] audit: type=1326 audit(1744385478.940:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 253.108779][ T26] audit: type=1326 audit(1744385478.940:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 253.160606][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1024'. [ 254.625061][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 254.654443][ T26] audit: type=1326 audit(1744385478.940:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 254.732169][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 254.928133][ T26] audit: type=1326 audit(1744385478.940:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 255.036881][ T26] audit: type=1326 audit(1744385478.940:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 255.246776][ T26] audit: type=1326 audit(1744385478.940:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 255.313936][ T7328] overlayfs: failed to clone lowerpath [ 255.756232][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.762587][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.802533][ T26] audit: type=1326 audit(1744385478.950:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 256.466271][ T26] audit: type=1326 audit(1744385478.950:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 256.763654][ T26] audit: type=1326 audit(1744385478.950:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 256.879719][ T26] audit: type=1326 audit(1744385478.950:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 256.985112][ T26] audit: type=1326 audit(1744385478.950:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 257.137090][ T26] audit: type=1326 audit(1744385478.950:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bb7634169 code=0x7ffc0000 [ 259.355963][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 259.385641][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 259.387995][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1039'. [ 259.394636][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 260.578570][ T7381] loop1: detected capacity change from 0 to 256 [ 261.472784][ T7384] loop5: detected capacity change from 0 to 2048 [ 261.492871][ T7380] loop4: detected capacity change from 0 to 4096 [ 261.574336][ T7384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.884036][ T7388] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.200894][ T7380] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 262.221172][ T7380] Remounting filesystem read-only [ 263.350171][ T7400] input: syz0 as /devices/virtual/input/input12 [ 263.459744][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 263.522105][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 263.574360][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 265.105317][ T7426] loop4: detected capacity change from 0 to 2048 [ 266.064796][ T7426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.520597][ T7447] loop5: detected capacity change from 0 to 2048 [ 267.741802][ T7447] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 267.791151][ T7456] loop4: detected capacity change from 0 to 256 [ 267.796232][ T7447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.899799][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 267.899816][ T26] audit: type=1804 audit(1744385497.020:45): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1066" name="/newroot/185/file0/bus" dev="loop4" ino=1048664 res=1 errno=0 [ 267.925445][ T7447] UDF-fs: unknown compression code (0) [ 268.120208][ T26] audit: type=1800 audit(1744385497.020:46): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1066" name="bus" dev="loop4" ino=1048664 res=0 errno=0 [ 268.913915][ T7466] lo speed is unknown, defaulting to 1000 [ 268.945366][ T7466] lo speed is unknown, defaulting to 1000 [ 268.985990][ T7466] lo speed is unknown, defaulting to 1000 [ 269.018464][ T7466] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.113883][ T7475] loop4: detected capacity change from 0 to 8 [ 269.141401][ T7466] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.199857][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1070'. [ 269.276806][ T7475] squashfs: Unknown parameter 'CT©Ÿ I¥F§X‰' [ 269.477980][ T7466] lo speed is unknown, defaulting to 1000 [ 269.489219][ T7466] lo speed is unknown, defaulting to 1000 [ 269.511184][ T7466] lo speed is unknown, defaulting to 1000 [ 270.237508][ T7466] lo speed is unknown, defaulting to 1000 [ 270.344775][ T7466] lo speed is unknown, defaulting to 1000 [ 270.752471][ T7495] lo speed is unknown, defaulting to 1000 [ 270.759718][ T7495] lo speed is unknown, defaulting to 1000 [ 270.773164][ T7495] lo speed is unknown, defaulting to 1000 [ 270.833031][ T7495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 271.062922][ T7495] lo speed is unknown, defaulting to 1000 [ 271.069833][ T7495] lo speed is unknown, defaulting to 1000 [ 271.076596][ T7495] lo speed is unknown, defaulting to 1000 [ 271.083549][ T7495] lo speed is unknown, defaulting to 1000 [ 271.090370][ T7495] lo speed is unknown, defaulting to 1000 [ 271.571072][ T7503] loop4: detected capacity change from 0 to 2048 [ 271.860618][ T7503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.537046][ T7514] delete_channel: no stack [ 272.588725][ T7513] delete_channel: no stack [ 274.647048][ T7544] [ 274.649715][ T7544] ============================= [ 274.654626][ T7544] WARNING: suspicious RCU usage [ 274.659581][ T7544] 5.15.180-syzkaller #0 Not tainted [ 274.664867][ T7544] ----------------------------- [ 274.669799][ T7544] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 274.678422][ T7544] [ 274.678422][ T7544] other info that might help us debug this: [ 274.678422][ T7544] [ 274.688745][ T7544] [ 274.688745][ T7544] rcu_scheduler_active = 2, debug_locks = 1 [ 274.696941][ T7544] 1 lock held by syz.3.1090/7544: [ 274.702257][ T7544] #0: ffffffff8cb1fd00 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 274.712485][ T7544] [ 274.712485][ T7544] stack backtrace: [ 274.718926][ T7544] CPU: 1 PID: 7544 Comm: syz.3.1090 Not tainted 5.15.180-syzkaller #0 [ 274.727098][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.737191][ T7544] Call Trace: [ 274.740480][ T7544] [ 274.743418][ T7544] dump_stack_lvl+0x1e3/0x2d0 [ 274.748170][ T7544] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 274.753830][ T7544] ? _printk+0x1/0x120 [ 274.757949][ T7544] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 274.763516][ T7544] get_callchain_entry+0x2ac/0x3c0 [ 274.768648][ T7544] get_perf_callchain+0xe6/0x810 [ 274.773600][ T7544] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 274.779596][ T7544] ? put_callchain_entry+0xb0/0xb0 [ 274.784719][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 274.790367][ T7544] ? lockdep_hardirqs_on+0x94/0x130 [ 274.795671][ T7544] ? preempt_schedule_irq+0x136/0x1c0 [ 274.801056][ T7544] ? lockdep_hardirqs_off+0x70/0x100 [ 274.806363][ T7544] __bpf_get_stack+0x378/0x570 [ 274.811152][ T7544] ? stack_map_get_build_id_offset+0x930/0x930 [ 274.817327][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 274.822976][ T7544] ? lockdep_hardirqs_on+0x94/0x130 [ 274.828232][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 274.833886][ T7544] bpf_get_stack_raw_tp+0x1b2/0x220 [ 274.839109][ T7544] bpf_prog_d43750871481577d+0x3d/0x164 [ 274.844673][ T7544] bpf_prog_run_pin_on_cpu+0x62/0x130 [ 274.850067][ T7544] bpf_prog_test_run_syscall+0x366/0x550 [ 274.855720][ T7544] ? sock_gen_cookie+0x60/0x60 [ 274.860500][ T7544] ? sock_gen_cookie+0x60/0x60 [ 274.865278][ T7544] bpf_prog_test_run+0x32f/0x3a0 [ 274.870235][ T7544] __sys_bpf+0x3ac/0x670 [ 274.874493][ T7544] ? bpf_link_show_fdinfo+0x300/0x300 [ 274.879899][ T7544] ? syscall_enter_from_user_mode+0x2e/0x240 [ 274.885896][ T7544] ? lockdep_hardirqs_on+0x94/0x130 [ 274.891125][ T7544] __x64_sys_bpf+0x78/0x90 [ 274.895562][ T7544] do_syscall_64+0x3b/0xb0 [ 274.899989][ T7544] ? clear_bhb_loop+0x15/0x70 [ 274.904689][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.910596][ T7544] RIP: 0033:0x7fc4516b7169 [ 274.915027][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.934668][ T7544] RSP: 002b:00007fc44f4de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.943110][ T7544] RAX: ffffffffffffffda RBX: 00007fc4518d0160 RCX: 00007fc4516b7169 [ 274.951099][ T7544] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 274.959082][ T7544] RBP: 00007fc451738990 R08: 0000000000000000 R09: 0000000000000000 [ 274.967062][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.975040][ T7544] R13: 0000000000000000 R14: 00007fc4518d0160 R15: 00007ffe613187d8 [ 274.983044][ T7544] [ 274.987641][ T7544] [ 274.990027][ T7544] ============================= [ 274.994908][ T7544] WARNING: suspicious RCU usage [ 275.000374][ T7544] 5.15.180-syzkaller #0 Not tainted [ 275.005634][ T7544] ----------------------------- [ 275.010487][ T7544] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 275.019224][ T7544] [ 275.019224][ T7544] other info that might help us debug this: [ 275.019224][ T7544] [ 275.029519][ T7544] [ 275.029519][ T7544] rcu_scheduler_active = 2, debug_locks = 1 [ 275.037670][ T7544] 1 lock held by syz.3.1090/7544: [ 275.042715][ T7544] #0: ffffffff8cb1fd00 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 275.052675][ T7544] [ 275.052675][ T7544] stack backtrace: [ 275.058744][ T7544] CPU: 1 PID: 7544 Comm: syz.3.1090 Not tainted 5.15.180-syzkaller #0 [ 275.066923][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.077016][ T7544] Call Trace: [ 275.080314][ T7544] [ 275.083265][ T7544] dump_stack_lvl+0x1e3/0x2d0 [ 275.087984][ T7544] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 275.093662][ T7544] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 275.099238][ T7544] perf_callchain_kernel+0x38b/0x6e0 [ 275.104560][ T7544] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 275.110220][ T7544] ? arch_perf_update_userpage+0x450/0x450 [ 275.116054][ T7544] ? _printk+0x1/0x120 [ 275.120154][ T7544] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 275.125732][ T7544] ? get_callchain_entry+0x186/0x3c0 [ 275.131048][ T7544] get_perf_callchain+0x579/0x810 [ 275.136112][ T7544] ? put_callchain_entry+0xb0/0xb0 [ 275.141252][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.146921][ T7544] ? preempt_schedule_irq+0x136/0x1c0 [ 275.152322][ T7544] ? lockdep_hardirqs_off+0x70/0x100 [ 275.157645][ T7544] __bpf_get_stack+0x378/0x570 [ 275.162445][ T7544] ? stack_map_get_build_id_offset+0x930/0x930 [ 275.168617][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.174272][ T7544] ? lockdep_hardirqs_on+0x94/0x130 [ 275.179498][ T7544] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.185163][ T7544] bpf_get_stack_raw_tp+0x1b2/0x220 [ 275.190392][ T7544] bpf_prog_d43750871481577d+0x3d/0x164 [ 275.195962][ T7544] bpf_prog_run_pin_on_cpu+0x62/0x130 [ 275.201407][ T7544] bpf_prog_test_run_syscall+0x366/0x550 [ 275.207057][ T7544] ? sock_gen_cookie+0x60/0x60 [ 275.211827][ T7544] ? sock_gen_cookie+0x60/0x60 [ 275.216593][ T7544] bpf_prog_test_run+0x32f/0x3a0 [ 275.221538][ T7544] __sys_bpf+0x3ac/0x670 [ 275.225781][ T7544] ? bpf_link_show_fdinfo+0x300/0x300 [ 275.231165][ T7544] ? syscall_enter_from_user_mode+0x2e/0x240 [ 275.237149][ T7544] ? lockdep_hardirqs_on+0x94/0x130 [ 275.242357][ T7544] __x64_sys_bpf+0x78/0x90 [ 275.246776][ T7544] do_syscall_64+0x3b/0xb0 [ 275.251193][ T7544] ? clear_bhb_loop+0x15/0x70 [ 275.255869][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.261763][ T7544] RIP: 0033:0x7fc4516b7169 [ 275.266180][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.285785][ T7544] RSP: 002b:00007fc44f4de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.294200][ T7544] RAX: ffffffffffffffda RBX: 00007fc4518d0160 RCX: 00007fc4516b7169 [ 275.302171][ T7544] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 275.310137][ T7544] RBP: 00007fc451738990 R08: 0000000000000000 R09: 0000000000000000 [ 275.318105][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.326075][ T7544] R13: 0000000000000000 R14: 00007fc4518d0160 R15: 00007ffe613187d8 [ 275.334061][ T7544] [ 278.295785][ T4168] Bluetooth: hci4: command 0x0406 tx timeout