last executing test programs: 11.550003206s ago: executing program 0 (id=389): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") r0 = syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x155, &(0x7f0000000200)="$eJzsj09LImEcxz+zo6OuuuvCLuxeloU9rGuY4wjdOmgkBdlA4KVrThRoikJ4zM4degFzia6Dp15A1slQiKKXMTchgmDimWn6c+sFPJ/LPL/P9zdfnmd5cZolo33imaV2q9O1ej2r8WfDrFWjoY8Bcf/U6nRVoBH48zLsiG8E3IGv45dpUde05rfaTbHmliELVJKwvRtFF1UD+Czc97v/YrdI8H/2b4KLH2KvaRm8Ero3isrXwOmAdwL/hPvmOz+fAX07fEI+N/PUMmj+1LeTOFfrk/FqPvfbOjKqv05TP1XqlogVkd8WxvnrwtC5mU5qa2bNnJYMY6GkF3VF5MDBMZGV1D5s+vtzQ0cN+jTRUYdD5dGzFXD83B0paSDJvdmKBVfay8CDZ7sjMSRe3nUWhwwofVv9QlQJdXDQ3k0SiUQikUgkEolEIpF8iKcAAAD//+UcUZw=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) chdir(&(0x7f0000000400)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0xdc0000000000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) close(r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) splice(r0, 0x0, r0, &(0x7f00000003c0)=0x10, 0x8, 0xd) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40c00, 0x20) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x18b) 9.973674721s ago: executing program 0 (id=392): syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaabbaaaaffffffffffc42bc02d940e75437546ff86dd604dd3180018060000016bfcdc47fd7c9ca48dd49a229b0470", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020302"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000780)=0xc) syz_open_procfs(r4, &(0x7f00000007c0)='limits\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000840)=""/141, 0x400000000001}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r8], 0x0) 5.832119216s ago: executing program 1 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f0400000017", 0x19}], 0x1) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140), 0xf) pwrite64(r3, 0x0, 0x0, 0x4) 5.831568246s ago: executing program 2 (id=401): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x42, 0x1) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0], 0x31) 5.765785757s ago: executing program 4 (id=402): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socket$unix(0x1, 0x5, 0x0) 5.619028127s ago: executing program 2 (id=404): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f000000a4c0)={0x2020}, 0xa5) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 5.56971184s ago: executing program 4 (id=405): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f00000000c0)={[{@rodir}, {@numtail}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@fat=@discard}, {@fat=@dmask={'dmask', 0x3d, 0x1b40}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x379, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r0, &(0x7f0000000f00)=""/87, 0x57) 4.341880332s ago: executing program 1 (id=408): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000), &(0x7f00000001c0)=0x8) 4.035851561s ago: executing program 1 (id=409): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0xe07e872420dfefca) 3.525849121s ago: executing program 4 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300"], 0x34}}, 0x0) 3.333754085s ago: executing program 2 (id=412): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6(0xa, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/172], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) 3.324758874s ago: executing program 3 (id=413): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) 2.366251493s ago: executing program 4 (id=414): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008041}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r1, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 2.34099968s ago: executing program 2 (id=415): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000200)=[0x4], 0x0, 0xffffffffffffffff}) 2.296548264s ago: executing program 3 (id=416): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1}], 0x10}, 0x40) 2.216395622s ago: executing program 0 (id=417): r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x60002) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000840)=0xffffffffffffffff) poll(&(0x7f0000001200)=[{r1, 0x132}], 0x1, 0x2) 2.169787026s ago: executing program 3 (id=418): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 2.169575886s ago: executing program 1 (id=419): r0 = socket$inet6(0xa, 0x3, 0x76) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 2.12446691s ago: executing program 2 (id=420): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000140)={0xce, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 2.04963836s ago: executing program 0 (id=421): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1.985759121s ago: executing program 1 (id=422): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 1.917185372s ago: executing program 1 (id=423): socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 1.329218222s ago: executing program 3 (id=424): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.153217548s ago: executing program 4 (id=425): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6(0xa, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/172], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) 1.142958016s ago: executing program 0 (id=426): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) 1.132386435s ago: executing program 2 (id=427): syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaabbaaaaffffffffffc42bc02d940e75437546ff86dd604dd3180018060000016bfcdc47fd7c9ca48dd49a229b0470", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020302"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000780)=0xc) syz_open_procfs(r4, &(0x7f00000007c0)='limits\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000840)=""/141, 0x400000000001}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r8], 0x0) 1.09964412s ago: executing program 3 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 869.264009ms ago: executing program 0 (id=429): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0xe07e872420dfefca) 60.915908ms ago: executing program 3 (id=430): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8be0, &(0x7f0000000280)={'wlan1\x00'}) 0s ago: executing program 4 (id=431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. [ 62.532800][ T4174] cgroup: Unknown subsys name 'net' [ 62.674228][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.161849][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.606611][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.699996][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 65.719938][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.731056][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 65.768501][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.860705][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.868090][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.876796][ T4198] device bridge_slave_0 entered promiscuous mode [ 65.893772][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.901488][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.909943][ T4198] device bridge_slave_1 entered promiscuous mode [ 65.956297][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.963687][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.972025][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.018448][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.025563][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.034463][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.042387][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.049860][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.058574][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.068158][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.078560][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.085677][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.094737][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.122677][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.130368][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.138784][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.148569][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.157898][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.165007][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.174100][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.182083][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.189247][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.197406][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.229981][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.237096][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.246297][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.256557][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.275157][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.300965][ T4198] team0: Port device team_slave_0 added [ 66.314848][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.334159][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.345323][ T4198] team0: Port device team_slave_1 added [ 66.363269][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.382177][ T4200] team0: Port device team_slave_0 added [ 66.390354][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.408806][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.420405][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.437390][ T4200] team0: Port device team_slave_1 added [ 66.458771][ T4196] team0: Port device team_slave_0 added [ 66.491884][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.498966][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.525449][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.540538][ T4196] team0: Port device team_slave_1 added [ 66.563923][ T4192] team0: Port device team_slave_0 added [ 66.570884][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.578055][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.604619][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.631383][ T4188] team0: Port device team_slave_0 added [ 66.639527][ T4188] team0: Port device team_slave_1 added [ 66.645735][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.653245][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.680111][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.696429][ T4192] team0: Port device team_slave_1 added [ 66.729405][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.736575][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.762803][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.787753][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.794756][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.821338][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.840137][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.847593][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.874129][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.904311][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.911434][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.937658][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.951296][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.958778][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.984956][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.004771][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.011884][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.038500][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.057694][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.064921][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.091290][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.126008][ T4198] device hsr_slave_0 entered promiscuous mode [ 67.133303][ T4198] device hsr_slave_1 entered promiscuous mode [ 67.156967][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.166043][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.173688][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.181744][ T4196] Cannot create hsr debugfs directory [ 67.191445][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.199216][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.206287][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.214501][ T4200] Cannot create hsr debugfs directory [ 67.258356][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 67.265113][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 67.288895][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.296548][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.303245][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.311102][ T4192] Cannot create hsr debugfs directory [ 67.337189][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 67.338065][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 67.349876][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 67.361074][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.368340][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.375005][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.382726][ T4188] Cannot create hsr debugfs directory [ 67.701278][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.714124][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.731037][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.757709][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.792519][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.814179][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.825087][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.851518][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.903712][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.914087][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.927379][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.944248][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.012578][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.030007][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.040499][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.056367][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.077918][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.106306][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.116600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.133870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.159820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.170015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.180410][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.187857][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.198245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.207098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.216618][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.223851][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.232499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.252378][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.264796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.275396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.298851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.309884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.320361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.329556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.340057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.349127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.360230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.369503][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.381305][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.392291][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.402713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.412338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.441886][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.498160][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.515054][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.534747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.543479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.566322][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.579656][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.598806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.608311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.640579][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.650448][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.662399][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.669769][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.679031][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.691196][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.700345][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.707508][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.715752][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.725865][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.735222][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.744999][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.752100][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.761686][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.773307][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.812646][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.826631][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.842758][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.858389][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.874281][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.884604][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.891942][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.903958][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.913240][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.922706][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.933234][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.942299][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.951293][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.961871][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.972627][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.995331][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.005549][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.044080][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.061426][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.074446][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.085841][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.110763][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.130180][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.145058][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.153549][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.182477][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.192982][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.203164][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.214639][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.223646][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.232489][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.241428][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.253138][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.262909][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.272110][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.281427][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.288566][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.297881][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.306012][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.327649][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 69.338713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.342867][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 69.365435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.378351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.388190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.396784][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.404315][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.412917][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 69.419495][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.427461][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.436006][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 69.445336][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.466356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.475768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.485388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.495594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.504487][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.511718][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.521251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.528839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.536300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.545569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.564571][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.593499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.607072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.618488][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.625614][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.638821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.653952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.664870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.676495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.692742][ T4198] device veth0_vlan entered promiscuous mode [ 69.701127][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.712207][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.721417][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.758426][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.773127][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.782153][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.793812][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.802893][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.813864][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.842967][ T4198] device veth1_vlan entered promiscuous mode [ 69.869256][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.879975][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.890826][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.901146][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.910778][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.921229][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.931657][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.941679][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.950681][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.959923][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.984609][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.996198][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.012278][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.022229][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.033433][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.042972][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.054814][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.063609][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.071415][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.081395][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.107594][ T4196] device veth0_vlan entered promiscuous mode [ 70.119041][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.136985][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.181781][ T4198] device veth0_macvtap entered promiscuous mode [ 70.201458][ T4196] device veth1_vlan entered promiscuous mode [ 70.216145][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.226176][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.235837][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.245492][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.254363][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.264216][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.279358][ T4198] device veth1_macvtap entered promiscuous mode [ 70.325195][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.334773][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.349581][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.385363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.396242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.412568][ T4196] device veth0_macvtap entered promiscuous mode [ 70.456015][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.471348][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.482667][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.492754][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.502420][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.511303][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.520421][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.530709][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.540098][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.549506][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.561458][ T4196] device veth1_macvtap entered promiscuous mode [ 70.574276][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.597441][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.606819][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.615971][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.625847][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.636940][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.645692][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.654698][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.662482][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.683187][ T4188] device veth0_vlan entered promiscuous mode [ 70.705008][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.716776][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.730653][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.739034][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.747559][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.756183][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.765436][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.794063][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.813529][ T4188] device veth1_vlan entered promiscuous mode [ 70.835175][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.850524][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.859164][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.867848][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.876783][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.896614][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.914944][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.928237][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.957221][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.966127][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.979451][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.989921][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.009560][ T4200] device veth0_vlan entered promiscuous mode [ 71.032067][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.043512][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.057673][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.073639][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.090366][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.101142][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.111089][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.120430][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.159372][ T4188] device veth0_macvtap entered promiscuous mode [ 71.235133][ T4200] device veth1_vlan entered promiscuous mode [ 71.253681][ T4188] device veth1_macvtap entered promiscuous mode [ 71.294292][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.303345][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.314899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.329921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.339801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.348927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.359256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.389595][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.404913][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.421475][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428228][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439009][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 71.445245][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 71.465885][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.478568][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.488740][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 71.495160][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 71.502163][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 71.516722][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.531321][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.542850][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.553544][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.568744][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.576521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.585242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.595607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.604758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.614538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.651339][ T4200] device veth0_macvtap entered promiscuous mode [ 71.676595][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.678182][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.701297][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.716239][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.720765][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.736652][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.752185][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.763299][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.775423][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.791843][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.804065][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.813847][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.823845][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.834888][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.843791][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.855470][ T4192] device veth0_vlan entered promiscuous mode [ 71.873000][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.901498][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911558][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.920811][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934005][ T4200] device veth1_macvtap entered promiscuous mode [ 71.986438][ T4265] loop2: detected capacity change from 0 to 1024 [ 72.021735][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.029644][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029703][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029715][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029729][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029741][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029755][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.036643][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.062297][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.113857][ T4192] device veth1_vlan entered promiscuous mode [ 72.134829][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.168003][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.190049][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.218484][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.247477][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.263672][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.275205][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.285824][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.300372][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.338126][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.368286][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.383647][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.409963][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456304][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.483010][ T4272] loop0: detected capacity change from 0 to 512 [ 72.489845][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.503113][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.539589][ T4272] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 72.566954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.580637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.604432][ T4272] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 256 (level 2) [ 72.623088][ T4272] EXT4-fs (loop0): 2 truncates cleaned up [ 72.639319][ T4272] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,jqfmt=vfsold,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 72.659217][ T4192] device veth0_macvtap entered promiscuous mode [ 72.694548][ T4272] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1: bg 0: block 5: invalid block bitmap [ 72.717619][ T4272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.770246][ T4192] device veth1_macvtap entered promiscuous mode [ 72.810928][ T4272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.810928][ T4272] [ 72.857464][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.866202][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.886485][ T4272] EXT4-fs (loop0): Total free blocks count 0 [ 72.901998][ T4272] EXT4-fs (loop0): Free/Dirty block details [ 72.922776][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.929034][ T4272] EXT4-fs (loop0): free_blocks=0 [ 72.964063][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.967839][ T4272] EXT4-fs (loop0): dirty_blocks=1 [ 72.985309][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.996129][ T4272] EXT4-fs (loop0): Block reservation details [ 72.996490][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.013310][ T4272] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 73.024023][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.036669][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.052605][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.064021][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.082450][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.112153][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.121708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.134324][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.142832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.158448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.179635][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.204790][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.237178][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.251244][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.268023][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.287214][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.297577][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.317218][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.331908][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.348055][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.359532][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.425538][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.435678][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.449133][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.461436][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.487998][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.497660][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.504172][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.532800][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.560246][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.581231][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 73.587914][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 73.604946][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 73.636592][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.740868][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.659885][ T4290] loop2: detected capacity change from 0 to 512 [ 75.413572][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.537204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 75.557205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 75.577182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 75.597220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 75.636261][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.644511][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.704305][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.897172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.057734][ T4301] loop2: detected capacity change from 0 to 512 [ 76.728898][ T4301] ======================================================= [ 76.728898][ T4301] WARNING: The mand mount option has been deprecated and [ 76.728898][ T4301] and is ignored by this kernel. Remove the mand [ 76.728898][ T4301] option from the mount to silence this warning. [ 76.728898][ T4301] ======================================================= [ 77.105009][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.172009][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.228158][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.236112][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.257401][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.342829][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.362985][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.379099][ T4315] process 'syz.2.12' launched '/dev/fd/4' with NULL argv: empty string added [ 77.409982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.567946][ T4322] netlink: 'syz.3.15': attribute type 2 has an invalid length. [ 77.584689][ T4320] loop0: detected capacity change from 0 to 4096 [ 77.723350][ T4330] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20004 [ 77.756137][ T4331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.986437][ T4335] loop4: detected capacity change from 0 to 1024 [ 78.028555][ T26] audit: type=1800 audit(1777917370.928:2): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 78.147265][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.198217][ T4335] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.427970][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 78.476145][ T4348] loop4: detected capacity change from 0 to 128 [ 78.494743][ T4348] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.498087][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.508784][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.515161][ T4348] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.580842][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 78.618996][ T23] usb 2-1: config 0 has no interface number 0 [ 78.837486][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 78.852568][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.861437][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 78.887478][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 79.250815][ T1107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 79.717195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 79.796006][ T23] usb 2-1: Product: syz [ 79.801648][ T23] usb 2-1: Manufacturer: syz [ 79.807182][ T23] usb 2-1: SerialNumber: syz [ 79.825656][ T23] usb 2-1: config 0 descriptor?? [ 79.836798][ T4302] Bluetooth: hci4: command 0x0405 tx timeout [ 79.837322][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.877162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.891673][ T23] hub 2-1:0.132: bad descriptor, ignoring hub [ 79.902620][ T23] hub: probe of 2-1:0.132 failed with error -5 [ 79.927699][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.006555][ T23] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5 [ 80.017348][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 80.077497][ T1107] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 80.127392][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.221776][ T1107] usb 4-1: Product: syz [ 80.246426][ T1107] usb 4-1: Manufacturer: syz [ 80.260710][ T4229] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 80.270115][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 80.282754][ T4229] usb 3-1: Product: syz [ 80.286983][ T4229] usb 3-1: Manufacturer: syz [ 80.291807][ T4229] usb 3-1: SerialNumber: syz [ 80.295483][ T1107] usb 4-1: SerialNumber: syz [ 80.301766][ T4229] usb 3-1: config 0 descriptor?? [ 80.341790][ T1107] usb 4-1: config 0 descriptor?? [ 80.370701][ T4229] imon_raw 3-1:0.0: IR endpoint missing [ 80.397721][ T4339] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.425040][ T1107] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 80.481677][ T4364] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.546078][ T4364] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.592181][ T4229] usb 3-1: USB disconnect, device number 2 [ 80.678557][ T4302] usb 2-1: USB disconnect, device number 2 [ 81.225452][ T4229] usb 4-1: USB disconnect, device number 2 [ 81.237205][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 81.243718][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 81.401475][ T4229] mcba_usb 4-1:0.0 can0: device disconnected [ 82.021839][ T4395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.164670][ T4401] Zero length message leads to an empty skb [ 82.215138][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 82.673231][ T4428] loop4: detected capacity change from 0 to 512 [ 82.724662][ T4428] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 82.740253][ T4428] EXT4-fs (loop4): mount failed [ 82.837411][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.049523][ T4428] loop4: detected capacity change from 0 to 8192 [ 83.247495][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.347500][ T4230] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 83.389420][ T4230] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.337345][ T4230] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 84.446122][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.487614][ T4230] usb 4-1: Product: syz [ 84.492086][ T4230] usb 4-1: Manufacturer: syz [ 84.524210][ T4230] usb 4-1: SerialNumber: syz [ 84.767166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 85.019786][ T4230] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 85.183240][ T4467] netlink: 'syz.0.52': attribute type 4 has an invalid length. [ 85.236736][ T4230] usb 4-1: USB disconnect, device number 3 [ 85.575335][ T4470] loop1: detected capacity change from 0 to 32768 [ 85.681280][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.753335][ T4470] XFS (loop1): Mounting V5 Filesystem [ 85.920663][ T4470] XFS (loop1): Ending clean mount [ 86.117437][ T4302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.262091][ T4188] XFS (loop1): Unmounting Filesystem [ 86.537523][ T4302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.618230][ T4302] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 86.657302][ T4302] usb 3-1: can't read configurations, error -71 [ 86.772007][ T13] cfg80211: failed to load regulatory.db [ 88.250064][ T4501] netlink: 'syz.4.63': attribute type 2 has an invalid length. [ 88.802428][ T4513] netlink: 'syz.0.68': attribute type 2 has an invalid length. [ 89.865381][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 89.985911][ T4529] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.993104][ T4529] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.240470][ T4536] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 90.288000][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 90.489947][ T13] usb 3-1: device descriptor read/64, error -71 [ 90.541342][ T4544] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 90.757406][ T13] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 90.957189][ T13] usb 3-1: device descriptor read/64, error -71 [ 91.077527][ T13] usb usb3-port1: attempt power cycle [ 92.620517][ T13] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 93.208375][ T13] usb 3-1: device descriptor read/8, error -71 [ 93.257094][ T4555] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 93.384522][ T4562] netlink: 'syz.3.85': attribute type 2 has an invalid length. [ 93.627326][ T4302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.901029][ T4302] usb 2-1: Using ep0 maxpacket: 8 [ 94.097389][ T4302] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 94.111117][ T4302] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.183812][ T4302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.206530][ T4302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.305790][ T4302] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.335457][ T4302] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.393914][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.436301][ T4572] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 95.506338][ T4585] loop0: detected capacity change from 0 to 256 [ 96.037822][ T4585] FAT-fs (loop0): Directory bread(block 64) failed [ 96.126484][ T4585] FAT-fs (loop0): Directory bread(block 65) failed [ 96.216907][ T4585] FAT-fs (loop0): Directory bread(block 66) failed [ 96.309724][ T4585] FAT-fs (loop0): Directory bread(block 67) failed [ 96.414171][ T4585] FAT-fs (loop0): Directory bread(block 68) failed [ 96.493842][ T4585] FAT-fs (loop0): Directory bread(block 69) failed [ 96.532711][ T4585] FAT-fs (loop0): Directory bread(block 70) failed [ 96.545002][ T4585] FAT-fs (loop0): Directory bread(block 71) failed [ 96.551732][ T4585] FAT-fs (loop0): Directory bread(block 72) failed [ 96.558680][ T4585] FAT-fs (loop0): Directory bread(block 73) failed [ 96.582416][ T4598] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 96.666804][ T4596] loop3: detected capacity change from 0 to 2048 [ 96.698908][ T4601] netlink: 'syz.4.100': attribute type 2 has an invalid length. [ 96.827770][ T4596] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.919730][ T4177] usb 2-1: USB disconnect, device number 3 [ 98.107934][ T4625] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 100.383570][ T4649] loop2: detected capacity change from 0 to 64 [ 100.657156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.579573][ T4657] sctp: failed to load transform for md5: -2 [ 102.896117][ T26] audit: type=1326 audit(1777917395.788:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.2.122" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7028dd9 code=0x0 [ 102.986396][ T4642] loop0: detected capacity change from 0 to 32768 [ 104.038409][ T4689] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.507442][ T4228] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 105.180026][ T4693] loop1: detected capacity change from 0 to 4096 [ 105.369202][ T4693] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 105.568138][ T4228] usb 3-1: not running at top speed; connect to a high speed hub [ 105.697899][ T4228] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 51753, setting to 64 [ 105.781586][ T4228] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.951242][ T4228] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.207736][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.307273][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.867669][ T21] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 106.992001][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.000637][ T4228] usb 3-1: Product: syz [ 107.005500][ T4228] usb 3-1: Manufacturer: syz [ 107.010704][ T4228] usb 3-1: SerialNumber: syz [ 107.030471][ T26] audit: type=1800 audit(1777917399.928:4): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 107.057650][ T4695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.067433][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.109454][ T21] usb 1-1: Product: syz [ 107.114044][ T21] usb 1-1: Manufacturer: syz [ 107.139709][ T4714] syz.1.130 (4714) used greatest stack depth: 21104 bytes left [ 107.147497][ T21] usb 1-1: SerialNumber: syz [ 107.168283][ T21] usb 1-1: config 0 descriptor?? [ 107.292597][ T4730] 8021q: VLANs not supported on xfrm0 [ 107.301048][ T4228] usb 3-1: bad CDC descriptors [ 107.487364][ T4737] tipc: Can't bind to reserved service type 2 [ 107.487387][ T21] usb 1-1: ignoring: probably an ADSL modem [ 107.503638][ T4228] usb 3-1: USB disconnect, device number 9 [ 108.464396][ T4745] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 108.507542][ T21] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 108.518901][ T21] usb 1-1: USB disconnect, device number 2 [ 109.474452][ T4740] loop1: detected capacity change from 0 to 2048 [ 109.552648][ T4740] hpfs: hpfs_map_sector(): read error [ 110.561407][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 110.718129][ T4775] loop3: detected capacity change from 0 to 32768 [ 110.760060][ T4786] netlink: 149 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.780239][ T4775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.155 (4775) [ 110.796482][ T4788] loop2: detected capacity change from 0 to 256 [ 110.807490][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.855570][ T4775] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 110.865254][ T4775] BTRFS info (device loop3): using free space tree [ 110.871914][ T4775] BTRFS info (device loop3): has skinny extents [ 111.328384][ T4228] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.382535][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.541941][ T4775] BTRFS info (device loop3): enabling ssd optimizations [ 111.607633][ T4228] usb 1-1: Product: syz [ 111.660199][ T4228] usb 1-1: Manufacturer: syz [ 111.725808][ T4228] usb 1-1: SerialNumber: syz [ 111.839997][ T4819] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 112.954326][ T4827] overlayfs: missing 'workdir' [ 112.977753][ T4228] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 113.634034][ T26] audit: type=1800 audit(1777917405.988:5): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.155" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 113.666333][ T4825] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 113.940300][ T4837] loop4: detected capacity change from 0 to 512 [ 113.957399][ T4228] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 113.987473][ T4228] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 114.011230][ T4228] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 114.033057][ T4228] lan78xx: probe of 1-1:1.0 failed with error -71 [ 114.064596][ T4228] usb 1-1: USB disconnect, device number 3 [ 114.373594][ T4849] loop2: detected capacity change from 0 to 2048 [ 114.409842][ T4849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.150572][ T4867] loop4: detected capacity change from 0 to 128 [ 115.283254][ T26] audit: type=1800 audit(1777917408.178:6): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.177" name="file2" dev="loop4" ino=1048594 res=0 errno=0 [ 115.324030][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.377900][ T4867] FAT-fs (loop4): Filesystem has been set read-only [ 115.398860][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.430564][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.464662][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.496406][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.523696][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.559757][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.592805][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.622719][ T4867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.635010][ T4866] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 115.747206][ T4228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.137317][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.208859][ T21] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 116.647693][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.720503][ T21] usb 3-1: config 0 has no interfaces? [ 116.771241][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.781232][ T4228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.795550][ T4228] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.804417][ T21] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 116.805206][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.827867][ T4228] usb 4-1: config 0 descriptor?? [ 116.887208][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.915811][ T4889] netlink: 'syz.1.182': attribute type 2 has an invalid length. [ 116.949903][ T21] usb 3-1: config 0 descriptor?? [ 117.040409][ T4892] tipc: Enabling of bearer rejected, failed to enable media [ 117.105449][ T4895] loop0: detected capacity change from 0 to 512 [ 117.141160][ T4897] loop4: detected capacity change from 0 to 256 [ 117.189097][ T4897] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 117.214952][ T4895] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 117.237377][ T21] usb 3-1: USB disconnect, device number 10 [ 117.254053][ T4895] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.185: corrupted in-inode xattr [ 117.273533][ T4895] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.185: couldn't read orphan inode 15 (err -117) [ 117.299966][ T4895] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 117.339851][ T4228] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 117.382899][ T4228] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 117.581633][ T4906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.188'. [ 118.767522][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.091799][ T4937] loop3: detected capacity change from 0 to 512 [ 119.137634][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.157570][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.224695][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.241245][ T4228] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 119.262160][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.279944][ T4937] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 119.295566][ T4228] usb 5-1: config 0 descriptor?? [ 119.361283][ T4937] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.545320][ T4937] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.200: Directory hole found for htree leaf block 0 [ 119.568430][ T4257] usb 4-1: USB disconnect, device number 4 [ 119.771351][ T4953] hub 8-0:1.0: USB hub found [ 119.781176][ T4953] hub 8-0:1.0: 1 port detected [ 119.791541][ T4228] wacom 0003:056A:0010.0002: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 119.877552][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.187479][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 120.318278][ T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 120.381231][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.502165][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.614758][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.639507][ T4228] wacom 0003:056A:0010.0002: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 120.657197][ T4228] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0002/input/input6 [ 120.710251][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.789348][ T4967] loop1: detected capacity change from 0 to 128 [ 120.819251][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.847881][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.880096][ T4967] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.896314][ T4967] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.109039][ T4975] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 121.207715][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 121.213651][ T23] usbtmc 3-1:16.0: can't read capabilities [ 121.431999][ T4230] usb 5-1: USB disconnect, device number 2 [ 121.515454][ T4985] loop1: detected capacity change from 0 to 4096 [ 121.617480][ T4951] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 121.707817][ T4228] usb 3-1: USB disconnect, device number 11 [ 122.102362][ T4988] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 122.987412][ T4188] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 123.091496][ T4994] loop0: detected capacity change from 0 to 4096 [ 123.120259][ T4188] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 123.259508][ T4994] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 123.307188][ T5008] device syzkaller1 entered promiscuous mode [ 123.362928][ T5006] sctp: [Deprecated]: syz.2.224 (pid 5006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.362928][ T5006] Use struct sctp_sack_info instead [ 123.533992][ T5003] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 123.569047][ T4288] ntfs3: loop0: ino=1b, Internal error [ 123.575356][ T4288] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 123.593439][ T4288] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 123.666364][ T5014] loop2: detected capacity change from 0 to 128 [ 123.790446][ T5024] sctp: [Deprecated]: syz.4.232 (pid 5024) Use of int in max_burst socket option. [ 123.790446][ T5024] Use struct sctp_assoc_value instead [ 123.855164][ T5027] loop0: detected capacity change from 0 to 512 [ 123.946983][ T5027] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.990956][ T5031] netlink: 'syz.1.234': attribute type 2 has an invalid length. [ 124.008928][ T5027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.841308][ T5027] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.233: bad orphan inode 131083 [ 124.977723][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 125.310103][ T5061] loop3: detected capacity change from 0 to 512 [ 125.440079][ T5061] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 125.539832][ T5059] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 125.611081][ T5061] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.176387][ T5083] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 129.493325][ T5101] binder: 5098:5101 ioctl c0285840 200000000000 returned -22 [ 129.666836][ T5102] loop2: detected capacity change from 0 to 7 [ 129.763426][ T3560] Dev loop2: unable to read RDB block 7 [ 129.821574][ T3560] loop2: unable to read partition table [ 129.883812][ T3560] loop2: partition table beyond EOD, truncated [ 130.305130][ T5102] Dev loop2: unable to read RDB block 7 [ 130.407594][ T5102] loop2: unable to read partition table [ 130.440500][ T5102] loop2: partition table beyond EOD, truncated [ 130.517734][ T5102] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 131.530712][ T5107] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 131.605810][ T5121] loop3: detected capacity change from 0 to 4096 [ 131.642740][ T5122] loop2: detected capacity change from 0 to 4096 [ 131.655797][ T5124] loop0: detected capacity change from 0 to 4096 [ 131.678238][ T5121] ntfs3: Unknown parameter 'windows_names' [ 131.722084][ T5124] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 131.783461][ T5122] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.893213][ T5122] ntfs3: loop2: Failed to load $Extend. [ 132.079193][ T26] audit: type=1800 audit(1777917424.948:7): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 132.103460][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.128442][ T26] audit: type=1800 audit(1777917425.018:8): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 132.300711][ T5142] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 132.862209][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869207][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.833880][ T5174] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 133.865066][ T5171] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 134.289805][ T5178] loop2: detected capacity change from 0 to 24 [ 134.423925][ T5178] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 134.557341][ T5178] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 134.862846][ T5189] loop4: detected capacity change from 0 to 1024 [ 134.973705][ T5191] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 136.263749][ T5160] ODEBUG: Out of memory. ODEBUG disabled [ 136.526222][ T5207] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 136.917006][ T5222] loop0: detected capacity change from 0 to 512 [ 136.924608][ T5216] loop3: detected capacity change from 0 to 40427 [ 136.983621][ T5222] EXT4-fs (loop0): inline encryption not supported [ 136.992484][ T5222] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.035646][ T5216] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.043886][ T5216] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.064254][ T5216] F2FS-fs (loop3): invalid crc value [ 137.084765][ T5216] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.152710][ T5222] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 137.184518][ T5216] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.192165][ T5216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.202967][ T5222] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.300: bg 0: block 248: padding at end of block bitmap is not set [ 137.329872][ T5222] Quota error (device loop0): write_blk: dquota write failed [ 137.364346][ T5236] netlink: 'syz.4.303': attribute type 2 has an invalid length. [ 137.387584][ T5222] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 137.450937][ T5241] loop2: detected capacity change from 0 to 512 [ 137.458141][ T5222] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.300: Failed to acquire dquot type 1 [ 138.242384][ T26] audit: type=1800 audit(1777917430.448:9): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 138.276678][ T5222] EXT4-fs (loop0): 1 truncate cleaned up [ 138.349865][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,abort,bsddf,,errors=continue. Quota mode: writeback. [ 138.604619][ T5222] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 138.616882][ T5222] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 138.627438][ T5222] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.300: Failed to acquire dquot type 1 [ 138.633605][ T5241] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 138.727311][ T5241] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.839322][ T5222] syz.0.300 (5222) used greatest stack depth: 20760 bytes left [ 138.880216][ T144] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 138.902515][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 1 [ 138.934361][ T4296] attempt to access beyond end of device [ 138.934361][ T4296] loop3: rw=1, want=79896, limit=40427 [ 138.956281][ T5253] netlink: 'syz.1.307': attribute type 4 has an invalid length. [ 139.082183][ T4296] attempt to access beyond end of device [ 139.082183][ T4296] loop3: rw=1, want=81920, limit=40427 [ 139.231456][ T26] audit: type=1326 audit(1777917432.128:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7028dd9 code=0x7ffc0000 [ 139.283265][ T5263] loop0: detected capacity change from 0 to 128 [ 139.333757][ T26] audit: type=1326 audit(1777917432.158:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1ff7028dd9 code=0x7ffc0000 [ 139.420162][ T5263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 139.443114][ T4296] attempt to access beyond end of device [ 139.443114][ T4296] loop3: rw=1, want=53248, limit=40427 [ 139.464993][ T5263] System zones: 1-3, 19-19, 35-36 [ 139.493606][ T5265] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 139.512161][ T5263] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 139.514409][ T26] audit: type=1326 audit(1777917432.158:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7028dd9 code=0x7ffc0000 [ 139.566279][ T4296] attempt to access beyond end of device [ 139.566279][ T4296] loop3: rw=1, want=59648, limit=40427 [ 139.593122][ T5263] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.696483][ T26] audit: type=1800 audit(1777917432.588:13): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.311" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 140.859885][ T5280] loop2: detected capacity change from 0 to 32768 [ 141.485927][ T4302] Bluetooth: hci2: command 0x2016 tx timeout [ 141.506839][ T5280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.316 (5280) [ 141.598791][ T5280] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.607718][ T5280] BTRFS info (device loop2): setting nodatasum [ 141.613942][ T5280] BTRFS info (device loop2): force zlib compression, level 3 [ 141.621958][ T5280] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.632421][ T5280] BTRFS info (device loop2): use lzo compression, level 0 [ 141.640198][ T5280] BTRFS info (device loop2): turning on flush-on-commit [ 141.647423][ T5280] BTRFS info (device loop2): enabling auto defrag [ 141.654036][ T5280] BTRFS info (device loop2): max_inline at 4096 [ 141.660326][ T5280] BTRFS info (device loop2): using free space tree [ 141.667156][ T5280] BTRFS info (device loop2): has skinny extents [ 142.523337][ T5297] loop0: detected capacity change from 0 to 512 [ 142.710558][ T5297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.101745][ T5297] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.320: bad orphan inode 131083 [ 144.219582][ T5297] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 144.564253][ T5280] BTRFS error (device loop2): open_ctree failed: -12 [ 145.370012][ T4270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4270) [ 145.406986][ T5335] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 145.654360][ T5338] loop3: detected capacity change from 0 to 32768 [ 146.693998][ T5338] XFS (loop3): Mounting V5 Filesystem [ 146.811925][ T5338] XFS (loop3): Ending clean mount [ 146.862456][ T5362] loop4: detected capacity change from 0 to 256 [ 146.871974][ T5354] loop0: detected capacity change from 0 to 4096 [ 146.888963][ T5360] netlink: 'syz.1.332': attribute type 4 has an invalid length. [ 146.926543][ T5354] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 146.972265][ T4200] XFS (loop3): Unmounting Filesystem [ 146.980591][ T5354] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 147.054727][ T5364] loop2: detected capacity change from 0 to 256 [ 147.061752][ T5354] ntfs3: loop0: Failed to load $Extend. [ 147.171207][ T5354] ntfs3: loop0: MftZone: unavailable [ 147.183610][ T5367] loop4: detected capacity change from 0 to 16 [ 147.208368][ T5354] ntfs3: loop0: MftZone: unavailable [ 147.249662][ T5354] ntfs3: loop0: no free space to extend mft [ 147.274712][ T5367] erofs: (device loop4): mounted with root inode @ nid 36. [ 147.711660][ T5373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.967996][ T5387] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 151.478719][ T4870] kernel write not supported for file /233/uid_map (pid: 4870 comm: kworker/1:18) [ 151.546527][ T5421] loop0: detected capacity change from 0 to 64 [ 151.957354][ T4232] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 153.102688][ T5438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.357'. [ 153.438121][ T5437] loop0: detected capacity change from 0 to 1024 [ 153.536164][ T5437] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 153.573394][ T5437] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.582554][ T5437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.589660][ T5437] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.358: Inode bitmap for bg 0 marked uninitialized [ 153.606379][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 153.613643][ T5437] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 153.643292][ T5437] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.358: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 154.719428][ T5463] syz.0.365 uses obsolete (PF_INET,SOCK_PACKET) [ 156.834915][ T5485] loop4: detected capacity change from 0 to 128 [ 156.927321][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.006048][ T5485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.080359][ T5485] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.307290][ T4230] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.067226][ T4230] usb 1-1: config 0 has no interface number 0 [ 158.397287][ T4230] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 158.406390][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.420240][ T4230] usb 1-1: Product: syz [ 158.437253][ T4230] usb 1-1: Manufacturer: syz [ 158.464061][ T4230] usb 1-1: SerialNumber: syz [ 158.509894][ T5499] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 158.526981][ T4230] usb 1-1: config 0 descriptor?? [ 158.797640][ T4230] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 159.580486][ T4230] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.650032][ T4230] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 159.693997][ T4230] usb 1-1: media controller created [ 159.801053][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.815729][ T5517] loop3: detected capacity change from 0 to 512 [ 159.920583][ T5517] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 160.030638][ T5517] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.387: bg 0: block 255: padding at end of block bitmap is not set [ 160.050620][ T5517] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 160.088773][ T5517] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.387: invalid indirect mapped block 1 (level 1) [ 160.186701][ T5526] loop0: detected capacity change from 0 to 256 [ 160.204777][ T5517] EXT4-fs (loop3): 1 truncate cleaned up [ 160.210922][ T4230] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 160.213521][ T5523] loop1: detected capacity change from 0 to 1024 [ 160.220206][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.252266][ T5526] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.337161][ T5526] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 160.359125][ T5526] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 160.461406][ T4230] usb 1-1: USB disconnect, device number 4 [ 160.556820][ T26] audit: type=1800 audit(1777917453.448:14): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 160.706148][ T5527] loop2: detected capacity change from 0 to 32768 [ 160.842976][ T5526] fuse: Unknown parameter '00000000000000000000' [ 160.863777][ T5527] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.872781][ T5527] BTRFS info (device loop2): setting nodatasum [ 160.879087][ T5527] BTRFS info (device loop2): force zlib compression, level 3 [ 160.886507][ T5527] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 160.895856][ T5527] BTRFS info (device loop2): use lzo compression, level 0 [ 160.903085][ T5527] BTRFS info (device loop2): turning on flush-on-commit [ 160.910109][ T5527] BTRFS info (device loop2): enabling auto defrag [ 160.916605][ T5527] BTRFS info (device loop2): max_inline at 4096 [ 160.923798][ T5527] BTRFS info (device loop2): using free space tree [ 160.930462][ T5527] BTRFS info (device loop2): has skinny extents [ 161.823614][ T5527] BTRFS info (device loop2): enabling ssd optimizations [ 162.041786][ T5560] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 162.321639][ T5571] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 162.373032][ T5568] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 162.615323][ T4270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4270) [ 166.204054][ T5599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.092442][ T5603] loop4: detected capacity change from 0 to 256 [ 167.175306][ T5605] autofs4:pid:5605:autofs_fill_super: called with bogus options [ 167.236078][ T5603] FAT-fs (loop4): Directory bread(block 64) failed [ 167.257307][ T5603] FAT-fs (loop4): Directory bread(block 65) failed [ 167.287691][ T5603] FAT-fs (loop4): Directory bread(block 66) failed [ 167.294604][ T5603] FAT-fs (loop4): Directory bread(block 67) failed [ 167.332236][ T5603] FAT-fs (loop4): Directory bread(block 68) failed [ 167.387252][ T5603] FAT-fs (loop4): Directory bread(block 69) failed [ 167.394135][ T5603] FAT-fs (loop4): Directory bread(block 70) failed [ 167.527164][ T5603] FAT-fs (loop4): Directory bread(block 71) failed [ 167.533847][ T5603] FAT-fs (loop4): Directory bread(block 72) failed [ 167.672035][ T5610] loop3: detected capacity change from 0 to 40427 [ 167.742930][ T5603] FAT-fs (loop4): Directory bread(block 73) failed [ 167.755130][ T5610] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 167.762907][ T5610] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.774922][ T5610] F2FS-fs (loop3): invalid crc value [ 167.846618][ T5610] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.872906][ T5615] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 167.907326][ T5610] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 167.914442][ T5610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 167.942976][ T5610] attempt to access beyond end of device [ 167.942976][ T5610] loop3: rw=2051, want=45064, limit=40427 [ 167.954911][ T5610] attempt to access beyond end of device [ 167.954911][ T5610] loop3: rw=2051, want=131072, limit=40427 [ 168.051649][ T5610] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 168.051698][ T5610] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 168.397396][ T5623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.411'. [ 169.522362][ T5634] loop4: detected capacity change from 0 to 128 [ 169.572671][ T5638] loop3: detected capacity change from 0 to 8 [ 169.659454][ T26] audit: type=1800 audit(1777917462.558:15): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.414" name="file2" dev="loop4" ino=1048605 res=0 errno=0 [ 169.680369][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.701508][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.742982][ T5634] FAT-fs (loop4): Filesystem has been set read-only [ 169.763386][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.782498][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.803125][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.870598][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.953189][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.963633][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.976533][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 169.987186][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 170.000790][ T5634] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 171.700431][ T5681] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 171.790380][ T5680] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 171.836673][ T5686] [ 171.839191][ T5686] ================================ [ 171.844438][ T5686] WARNING: inconsistent lock state [ 171.849816][ T5686] syzkaller #0 Not tainted [ 171.854270][ T5686] -------------------------------- [ 171.859405][ T5686] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 171.866416][ T5686] syz.0.429/5686 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 171.872848][ T5686] ffff88807bbda620 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980 [ 171.882514][ T5686] {IN-SOFTIRQ-W} state was registered at: [ 171.888258][ T5686] lock_acquire+0x19e/0x400 [ 171.893086][ T5686] _raw_spin_lock_nested+0x2e/0x40 [ 171.898319][ T5686] __sk_receive_skb+0x17b/0x980 [ 171.903388][ T5686] __sk_receive_skb+0x42c/0x980 [ 171.908361][ T5686] phonet_rcv+0x7e4/0xc70 [ 171.913034][ T5686] __netif_receive_skb+0xcc/0x290 [ 171.918294][ T5686] process_backlog+0x370/0x790 [ 171.923183][ T5686] __napi_poll+0xc0/0x430 [ 171.927647][ T5686] net_rx_action+0x4d4/0xa10 [ 171.932373][ T5686] handle_softirqs+0x339/0x830 [ 171.937281][ T5686] run_ksoftirqd+0xa4/0x100 [ 171.941917][ T5686] smpboot_thread_fn+0x4f6/0x970 [ 171.946984][ T5686] kthread+0x436/0x520 [ 171.951217][ T5686] ret_from_fork+0x1f/0x30 [ 171.955763][ T5686] irq event stamp: 87 [ 171.959869][ T5686] hardirqs last enabled at (87): [] __local_bh_enable_ip+0x136/0x1c0 [ 171.969644][ T5686] hardirqs last disabled at (85): [] __local_bh_enable_ip+0xd7/0x1c0 [ 171.979326][ T5686] softirqs last enabled at (86): [] __release_sock+0xa8/0x450 [ 171.988569][ T5686] softirqs last disabled at (84): [] release_sock+0x2b/0x1b0 [ 171.997520][ T5686] [ 171.997520][ T5686] other info that might help us debug this: [ 172.005583][ T5686] Possible unsafe locking scenario: [ 172.005583][ T5686] [ 172.013039][ T5686] CPU0 [ 172.016331][ T5686] ---- [ 172.019630][ T5686] lock(slock-AF_PHONET/1); [ 172.024358][ T5686] [ 172.028109][ T5686] lock(slock-AF_PHONET/1); [ 172.033052][ T5686] [ 172.033052][ T5686] *** DEADLOCK *** [ 172.033052][ T5686] [ 172.041731][ T5686] 1 lock held by syz.0.429/5686: [ 172.046929][ T5686] #0: ffff88807b7d58a0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0xb5/0x1190 [ 172.057372][ T5686] [ 172.057372][ T5686] stack backtrace: [ 172.063684][ T5686] CPU: 0 PID: 5686 Comm: syz.0.429 Not tainted syzkaller #0 [ 172.071468][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.082078][ T5686] Call Trace: [ 172.085412][ T5686] [ 172.088393][ T5686] dump_stack_lvl+0x188/0x250 [ 172.093125][ T5686] ? show_regs_print_info+0x20/0x20 [ 172.098576][ T5686] ? unwind_get_return_address+0x49/0x80 [ 172.104236][ T5686] valid_state+0x13b/0x1d0 [ 172.108816][ T5686] mark_lock_irq+0xa9/0x900 [ 172.113501][ T5686] ? stack_trace_save+0xa6/0xf0 [ 172.118636][ T5686] ? save_trace+0xa80/0xa80 [ 172.123337][ T5686] ? lockdep_count_forward_deps+0x200/0x200 [ 172.129491][ T5686] ? save_trace+0x5a/0xa80 [ 172.134102][ T5686] mark_lock+0x208/0x320 [ 172.139265][ T5686] __lock_acquire+0xd47/0x7d10 [ 172.144074][ T5686] ? try_to_wake_up+0x6cf/0x1050 [ 172.149423][ T5686] ? mark_lock+0x94/0x320 [ 172.154362][ T5686] ? __lock_acquire+0x13bc/0x7d10 [ 172.160149][ T5686] ? verify_lock_unused+0x140/0x140 [ 172.165906][ T5686] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 172.172877][ T5686] lock_acquire+0x19e/0x400 [ 172.177752][ T5686] ? __sk_receive_skb+0x17b/0x980 [ 172.182854][ T5686] ? read_lock_is_recursive+0x10/0x10 [ 172.188262][ T5686] ? sk_filter_trim_cap+0x59c/0x810 [ 172.193602][ T5686] ? __local_bh_enable_ip+0x136/0x1c0 [ 172.199022][ T5686] ? lockdep_hardirqs_on+0x94/0x140 [ 172.204508][ T5686] _raw_spin_lock_nested+0x2e/0x40 [ 172.209914][ T5686] ? __sk_receive_skb+0x17b/0x980 [ 172.215097][ T5686] __sk_receive_skb+0x17b/0x980 [ 172.220144][ T5686] ? pep_do_rcv+0x4ea/0x800 [ 172.225154][ T5686] __release_sock+0x1e1/0x450 [ 172.229870][ T5686] release_sock+0x5b/0x1b0 [ 172.234300][ T5686] pep_sock_accept+0xc73/0x1190 [ 172.239362][ T5686] ? pep_sock_connect+0x1b0/0x1b0 [ 172.244549][ T5686] ? aa_sk_perm+0x7dc/0x910 [ 172.249341][ T5686] pn_socket_accept+0x126/0x360 [ 172.254429][ T5686] ? pn_socket_connect+0xb90/0xb90 [ 172.259877][ T5686] ? bpf_lsm_socket_accept+0x5/0x10 [ 172.265242][ T5686] ? pn_socket_connect+0xb90/0xb90 [ 172.270396][ T5686] do_accept+0x509/0x6f0 [ 172.275197][ T5686] ? __ia32_sys_listen+0x60/0x60 [ 172.280164][ T5686] ? alloc_fd+0x598/0x630 [ 172.284680][ T5686] __sys_accept4+0x103/0x170 [ 172.289403][ T5686] __x64_sys_accept4+0x96/0xb0 [ 172.294290][ T5686] do_syscall_64+0x4c/0xa0 [ 172.298746][ T5686] ? clear_bhb_loop+0x30/0x80 [ 172.303630][ T5686] ? clear_bhb_loop+0x30/0x80 [ 172.308540][ T5686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.314617][ T5686] RIP: 0033:0x7fa7a89c9dd9 [ 172.319212][ T5686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.339368][ T5686] RSP: 002b:00007fa7a6c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 172.347885][ T5686] RAX: ffffffffffffffda RBX: 00007fa7a8c43090 RCX: 00007fa7a89c9dd9 [ 172.355902][ T5686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 172.363976][ T5686] RBP: 00007fa7a8a5fd69 R08: 0000000000000000 R09: 0000000000000000 [ 172.372263][ T5686] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 172.380275][ T5686] R13: 00007fa7a8c43128 R14: 00007fa7a8c43090 R15: 00007fffea892b48 [ 172.388529][ T5686] [ 172.547435][ T5689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.