last executing test programs: 17.733184455s ago: executing program 4 (id=447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000009}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.846714575s ago: executing program 0 (id=457): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000000f80)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0xfff, 0x2, 0x5, 0xf, 0xfffffd02, 0x2eae, 0x4, 0x4, 0xfffff156, 0x1, 0x7, 0x0, 0x9, 0x6, 0x3, 0x5, 0x5e, 0x8000, 0x4, 0x5, 0xf, 0x347, 0x0, 0x0, 0x6, 0x9, 0xffffffc0, 0x9, 0x80, 0x800, 0x6, 0x5, 0x4, 0x84, 0x8, 0xc00000, 0x4, 0xf, 0x0, 0x9, 0x3, 0x80002, 0x5cce, 0x9, 0x3, 0x6, 0x139, 0x81, 0x8, 0x9, 0x2, 0x6, 0xfff, 0x3fb, 0x4, 0x6, 0xfffffffe, 0x3, 0x2, 0xc66, 0x0, 0x4, 0xff, 0xc10, 0x8, 0x0, 0x3, 0x2, 0x4e9, 0x5, 0x2, 0x5, 0xffffffff, 0x2, 0x8, 0x3, 0xc, 0x7fffffff, 0x1, 0x80, 0x9, 0x571b, 0x8, 0x7, 0x8, 0x2, 0x200, 0x100, 0x21b, 0xfff, 0x1, 0x8, 0x50, 0xe, 0x6, 0xe, 0x5, 0x2, 0x1, 0x0, 0xf2, 0xffffffff, 0x9233, 0xb198, 0x7, 0x401, 0x4, 0x1, 0x617e, 0x3, 0x7, 0xb, 0x0, 0xc, 0x4, 0x18000000, 0x4, 0xec1, 0xb4b, 0x3ff, 0x5, 0x8, 0x8be, 0xee9, 0x3, 0x30, 0x6]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) socket(0x1, 0x3, 0x0) 13.499916655s ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x5, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 12.824897606s ago: executing program 4 (id=462): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001200)=0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000000000000000000000000de07c02fa65f3540ebb3bfd817d6b77a801e6d05658cfc37d6035e21efcd0bdadeca4f95166fc12b7a9bb95de9f52a91f2390b7b2a7a61dfb8f53f2c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000007eba521fb0ec4d39ac64443a2f35563e79d33e2470a6957d373becac05b54c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYRES32=r8], 0x48}}, 0x0) write$UHID_SET_REPORT_REPLY(r6, 0x0, 0xbb) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 11.684750889s ago: executing program 2 (id=465): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x90, 0x82, &(0x7f00000001c0)="187ff26f375634ef105c3d6b2c8f6cac15a476845bc4efdc46a8ce3a4374e349e2a60193a17bb58196e7a4c8bcbb343fa2ec114f5917f0e38ea0c6b00fd026aac11255325e3a50c6fffd673d1784d421529b2297468611e0d51d7ac03c32724a16187350e356f48332b9c61fd6f8821c8638dc2c2246ea8ce7d2e868ae99df64bbaca97f3e4f57767052e6de4622f169", &(0x7f00000002c0)=""/130, 0x1, 0x0, 0x5d, 0xcd, &(0x7f0000000380)="06d6ef621b57f59c01e47494444f5d01c8dba580ddff90b71722d56a50d185fcd508d58d735c3eaa75c8a7242444a0c6a3bedd830d1a76ac3c440c9a6af8c628ca5def8992d391aa048495b4306b8efc0bd413d1e0f03cc856ecfbf78f", &(0x7f0000000400)="910093a0b900285659493d047dd7e18aac4edfc1bc218db83a57cb4a8bfb17f111709491769a3dd42989366d1eb3faf9921df7d05c5dfc94b5c46d403c169a952e320c8083a1bcf01f25cf2e8be5c8eeceb79487bf05e667e728205226f15aa83ce0efb56d14281df1e709ef55e2ce6aeea807d47e9e75712280450b35542c3bb617b722fceaa3df42a5eb2ca571bba96e1de293a77652da99bf39a385ffc75210b103662eb023f99d538c6b6303d97b2a6a6d61969bacd0d481862fba24464ead472e5e4a46b8a5ea0a7743e6", 0x0, 0x0, 0xede}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r0, 0x0, 0x20004001) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x4) socket(0x10, 0x80002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, 0x0) 11.459836439s ago: executing program 4 (id=467): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)) 9.171972334s ago: executing program 2 (id=471): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000380), 0x1, 0x79d, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x73622a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 8.855359963s ago: executing program 0 (id=474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.56257864s ago: executing program 0 (id=475): getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x2ec7fd55c50336e6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xb, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) close(r3) 6.946586735s ago: executing program 1 (id=477): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000005389b3685c0836456d62cffe21fa010ae8354173037f7d719c2a"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 6.679846779s ago: executing program 4 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x7d, 0x1f, 0x22, 0x20, 0xfd86, 0x2248, 0x755b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x5, 0x50}}]}}]}}, 0x0) 6.464403748s ago: executing program 1 (id=480): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0xf, 0x11012, r3, 0xe5708000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x2710, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x38}}, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') 5.936476145s ago: executing program 2 (id=481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 5.520990893s ago: executing program 3 (id=482): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x2a) mkdir(&(0x7f0000000300)='./bus\x00', 0x128) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{&(0x7f0000000340), 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000740)=""/235, 0xeb}], 0x3, &(0x7f0000000840)=""/95, 0x5f}, 0xd68}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/139, 0x8b}, {&(0x7f0000000a00)=""/177, 0xb1}], 0x2, &(0x7f0000000ac0)=""/140, 0x8c}, 0xfffffff7}, {{&(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/29, 0x1d}, 0x1}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/220, 0xdc}], 0x1, &(0x7f0000000dc0)=""/45, 0x2d}, 0xfffffffc}, {{&(0x7f0000000e00)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/131, 0x83}, {&(0x7f0000000fc0)=""/149, 0x95}, {0x0}, {&(0x7f0000001100)=""/190, 0xbe}], 0x4, &(0x7f0000001240)=""/170, 0xaa}, 0x6}], 0x5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0) 5.463053228s ago: executing program 2 (id=483): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 4.55633803s ago: executing program 1 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='ext4_ext_remove_space_done\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r3) 4.512202034s ago: executing program 0 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0x0, 0x0) r6 = getegid() socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [{0x8, 0x2, r6}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4, r7}, {0x8, 0x1, r8}], {0x10, 0x4}}, 0x5c, 0x2) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES16=r9], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x7c1496be2da30d9d, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x300}}) 4.379886726s ago: executing program 1 (id=486): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b261710000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1fffffffffffffa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028e000000000000000004850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0x3) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getlink={0x4c, 0x12, 0x487, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x4c}}, 0x0) 4.368102566s ago: executing program 2 (id=487): getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyBEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbWFLu0X7+SSz+97Mm7737cxr38zrBDCyprI/ScTWiPgjIibq2eYCU/V/166cW7h+5dxCEtXqu38ntXJXr5xbKIoW+23JM9NpRPp5Ervb1Lty5uzx+Upl6VSen1098dHsypmzLxw7MX906ejSyf2HDh08MPfyS/tf7EucWZuu7vpkec/Otz74+u3DX2brxov4W+Lok6luG5+uVvtc3XBta0gnY0NsCOtSiojscJVr/X8iSrF28Cbizc+G2jhgoKrVanVL583nq8D/WBLNeV0eRkXxRZ9d/xZL6yDg1cENP4bu8mv1C6As7mv5Ut8yFmleptxyfdtPUxHx/vl/vs2WGMx9CACAJj9m45/n243/0nioodx9+dzQZETcHxHbI+KBiNgREQ9G1Mo+HBGPrLP+1kmSm8c/6aWeArtN2fjvlXxuq3n8V4z+YrKU57bV4i8nR45Vlvbl78l0lDdl+bkudfz0xu9fddrWOP7Llqz+YiyYt+PS2KbmfRbnV+fvJOZGly9E7BprF39yYyYgiYidEbGrxzqOPfv9nk7bbh1/F32YZ6p+F/FM/fifj5b4C0n3+cnZe6KytG+2OCtu9utvF9/pVP8dxd8H2fG/t+35fyP+yaRxvnZl/XVc/POLjtc0vZ7/48l7tfR4vu70/OrqqbmI8eRwvdGN6/ev7Vvki/JZ/NN72/f/7bH2TuyOiOwkfjQiHouIx/O2PxERT0bE3i7x//L6Ux/2Hv9gZfEvruv4ryXGo3VN+0Tp+M8/NFU6eVP817sf/4O11HS+5nY+/26nXb2dzQAAAPDfk0bE1kjSmRvpNJ2Zqf9efkdEWlleWX3uyPLHJxfrzwhMRjkt7nRNNNwPncsv6+v5CxFR/2lBsf1Aft/4m9LmWn5mYbmyOOzgYcRt6dD/M3+Vht06YOA8rwWjS/+H0aX/w+jS/2F0ten/m4fRDmDjtfv+/3QI7QA2Xkv/N+0HI8T1P4wu/R9Gl/4PI2llc9z6IfmuieKVety9W2LsdP2l+//KG5CI8l3RjIElIr0rmiExoMQQP5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66N8AAAD//8fe3d4=") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x2ec7fd55c50336e6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xb, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(r4, &(0x7f00000005c0)='net/igmp6\x00') pread64(r7, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) close(r3) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 4.067270973s ago: executing program 3 (id=488): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x1a4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xf4, 0x6, [@m_nat={0xc4, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x74, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645fc28bd05cca953cb4705ee5fdd6950f43ec843b0e8335d"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x1a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.031686107s ago: executing program 3 (id=489): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400000040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='huge=always']) 2.66378745s ago: executing program 2 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001200)="e906250ade6f4d45", 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) 2.606571415s ago: executing program 0 (id=491): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000380), 0x1, 0x79d, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x73622a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 2.463752498s ago: executing program 3 (id=492): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111060000000000851000000200000085000400bb00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000340)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000f7ffffff0000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200001a3, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1.586082227s ago: executing program 4 (id=493): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000022) close(r6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d45cb388dd965f4e8112779a", 0x0, 0x10001, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.397386654s ago: executing program 1 (id=494): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00llow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,fmask=00000000000000000000003,iocharset=cp864,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x2000000}, {0x6}]}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6f39cc8e7413d0f2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1.32601008s ago: executing program 3 (id=495): getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x2ec7fd55c50336e6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xb, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) close(r3) 83.238451ms ago: executing program 0 (id=496): socket$packet(0x11, 0xa, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 81.755592ms ago: executing program 3 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 1 (id=498): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x2a) mkdir(&(0x7f0000000300)='./bus\x00', 0x128) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{&(0x7f0000000340), 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000740)=""/235, 0xeb}], 0x3, &(0x7f0000000840)=""/95, 0x5f}, 0xd68}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/139, 0x8b}, {&(0x7f0000000a00)=""/177, 0xb1}], 0x2, &(0x7f0000000ac0)=""/140, 0x8c}, 0xfffffff7}, {{&(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/29, 0x1d}, 0x1}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/220, 0xdc}], 0x1, &(0x7f0000000dc0)=""/45, 0x2d}, 0xfffffffc}, {{&(0x7f0000000e00)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/131, 0x83}, {&(0x7f0000000fc0)=""/149, 0x95}, {0x0}, {&(0x7f0000001100)=""/190, 0xbe}], 0x4, &(0x7f0000001240)=""/170, 0xaa}, 0x6}], 0x5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0) kernel console output (not intermixed with test programs): atadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.380693][ T3572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.394702][ T3573] team0: Port device team_slave_1 added [ 45.407659][ T3572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.414875][ T3572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.442357][ T3572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.480752][ T3576] device hsr_slave_0 entered promiscuous mode [ 45.488859][ T3576] device hsr_slave_1 entered promiscuous mode [ 45.540244][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.547735][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.574479][ T3573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.596817][ T3568] device hsr_slave_0 entered promiscuous mode [ 45.603558][ T3568] device hsr_slave_1 entered promiscuous mode [ 45.610252][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.618294][ T3568] Cannot create hsr debugfs directory [ 45.632018][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.639040][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.665175][ T3573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.685466][ T3567] device hsr_slave_0 entered promiscuous mode [ 45.692214][ T3567] device hsr_slave_1 entered promiscuous mode [ 45.699190][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.707077][ T3567] Cannot create hsr debugfs directory [ 45.725357][ T3572] device hsr_slave_0 entered promiscuous mode [ 45.732384][ T3572] device hsr_slave_1 entered promiscuous mode [ 45.739305][ T3572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.747906][ T3572] Cannot create hsr debugfs directory [ 45.806341][ T1075] Bluetooth: hci2: command 0x0409 tx timeout [ 45.815425][ T1965] Bluetooth: hci3: command 0x0409 tx timeout [ 45.821595][ T1965] Bluetooth: hci1: command 0x0409 tx timeout [ 45.869624][ T3573] device hsr_slave_0 entered promiscuous mode [ 45.876900][ T3573] device hsr_slave_1 entered promiscuous mode [ 45.883628][ T3573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.885648][ T1075] Bluetooth: hci0: command 0x0409 tx timeout [ 45.891594][ T1965] Bluetooth: hci4: command 0x0409 tx timeout [ 45.902979][ T3573] Cannot create hsr debugfs directory [ 46.137788][ T3567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.152299][ T3567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.161922][ T3567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.176881][ T3568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.188970][ T3567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.204832][ T3568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.214767][ T3568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.223919][ T3568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.301521][ T3572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.322118][ T3572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.331819][ T3572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.350556][ T3572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.413714][ T3576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.440822][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.448413][ T3576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.458061][ T3576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.474220][ T3576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.488735][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.526871][ T3573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.539183][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.550233][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.559353][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.567235][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.579560][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.588398][ T3573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.600213][ T3573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.616034][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.628847][ T3573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.658090][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.667741][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.679339][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.686807][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.696171][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.708634][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.717180][ T2658] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.724300][ T2658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.732194][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.742816][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.751346][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.758478][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.767249][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.777012][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.786492][ T2658] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.793544][ T2658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.801331][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.810691][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.856862][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.865059][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.873931][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.883788][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.902826][ T3567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.914392][ T3567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.938500][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.945609][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.954307][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.964338][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.973027][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.982318][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.990893][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.999895][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.009082][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.032036][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.040611][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.049511][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.057686][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.070212][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.080230][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.089436][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.098802][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.111078][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.123364][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.134120][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.158445][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.167453][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.205492][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.213816][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.223428][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.232362][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.240852][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.247944][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.257249][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.265907][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.274088][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.289463][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.307180][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.327151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.337189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.348614][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.355730][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.370513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.396569][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.426160][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.437216][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.446876][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.457187][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.464415][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.472809][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.481623][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.491356][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.499147][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.507150][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.516084][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.524405][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.531566][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.539880][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.548620][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.557285][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.566877][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.575127][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.583990][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.592778][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.601847][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.610229][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.618495][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.633931][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.642643][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.651989][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.671662][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.688993][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.708773][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.723928][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.733054][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.741841][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.761281][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.773273][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.786845][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.808813][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.817508][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.825114][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.836707][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.846580][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.855841][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.864237][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.873077][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.881114][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.889403][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 47.894373][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.895529][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 47.895608][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 47.918439][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.927002][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.936571][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.954377][ T3567] device veth0_vlan entered promiscuous mode [ 47.966293][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 47.974330][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 47.976319][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.997945][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.016094][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.023167][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.051853][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.064912][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.079722][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.092498][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.101514][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.108707][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.119395][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.127213][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.134604][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.144196][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.159695][ T3567] device veth1_vlan entered promiscuous mode [ 48.174974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.188907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.199576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.212884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.222764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.232730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.242063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.251033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.287711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.296386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.304984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.313919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.322177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.340971][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.361042][ T3567] device veth0_macvtap entered promiscuous mode [ 48.373574][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.382374][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.392042][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.400936][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.409866][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.418747][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.435019][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.444290][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.453049][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.468538][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.479647][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.492252][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.502785][ T3567] device veth1_macvtap entered promiscuous mode [ 48.517034][ T3572] device veth0_vlan entered promiscuous mode [ 48.543288][ T3572] device veth1_vlan entered promiscuous mode [ 48.565025][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.574266][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.582826][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.591397][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.600337][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.610049][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.620863][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.647062][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.663217][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.672615][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.682041][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.692262][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.703288][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.712684][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.722039][ T3568] device veth0_vlan entered promiscuous mode [ 48.734677][ T3576] device veth0_vlan entered promiscuous mode [ 48.746412][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.755048][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.763277][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.771430][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.781585][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.802851][ T3568] device veth1_vlan entered promiscuous mode [ 48.813827][ T3567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.823430][ T3567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.832394][ T3567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.841418][ T3567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.862324][ T3572] device veth0_macvtap entered promiscuous mode [ 48.874286][ T3576] device veth1_vlan entered promiscuous mode [ 48.888295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.896955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.907090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.915461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.924071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.933910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.943817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.951558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.959473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.970917][ T3572] device veth1_macvtap entered promiscuous mode [ 48.983013][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.003761][ T3568] device veth0_macvtap entered promiscuous mode [ 49.029189][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.040236][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.052056][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.059947][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.069283][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.078012][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.087755][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.096565][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.111250][ T3568] device veth1_macvtap entered promiscuous mode [ 49.131437][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.140097][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.148874][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.158452][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.189098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.198736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.217596][ T3576] device veth0_macvtap entered promiscuous mode [ 49.226392][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.239649][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.253073][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.273872][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.291009][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.302247][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.315315][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.326954][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.336028][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.345419][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.353885][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.363949][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.372990][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.388205][ T3572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.397699][ T3572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.408413][ T3572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.417298][ T3572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.433798][ T3576] device veth1_macvtap entered promiscuous mode [ 49.444206][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.457136][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.470130][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.480980][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.498578][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.510848][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.519632][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.528640][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.537390][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.558277][ T3573] device veth0_vlan entered promiscuous mode [ 49.578590][ T3568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.589984][ T3568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.599121][ T3568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.609070][ T3568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.618914][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.627093][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.645976][ T3573] device veth1_vlan entered promiscuous mode [ 49.673098][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.687485][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.698037][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.709558][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.720157][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.731895][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.743207][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.762749][ T2658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.771201][ T2658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.792043][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.800668][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.811941][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.819843][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.829448][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.846949][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.858234][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.868419][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.880066][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.890845][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.901374][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.913592][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.938912][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.947761][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.957024][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.965463][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.975584][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 49.980673][ T3576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.981851][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 49.991001][ T3576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.001874][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 50.006646][ T3576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.021767][ T3576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.044036][ T3573] device veth0_macvtap entered promiscuous mode [ 50.051267][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 50.057804][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 50.101424][ T3573] device veth1_macvtap entered promiscuous mode [ 50.111426][ T2658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.121064][ T2658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.134040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.147277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.155075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.199257][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.213869][ T1371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.223725][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.234628][ T1371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.244401][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.253481][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.265743][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.276565][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.287857][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.298546][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.308842][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.320453][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.332100][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.351750][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.361910][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.370661][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.379755][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.393874][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.410098][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.420925][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.437651][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.452176][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.458563][ T3647] loop3: detected capacity change from 0 to 2048 [ 50.470370][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.491633][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.504150][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.512286][ T3647] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 50.516012][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.532886][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.551531][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.560638][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.567657][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.578776][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.603665][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.615726][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.624529][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.633988][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.650629][ T2658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.661383][ T2658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.698092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.707692][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.739744][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.761030][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.774019][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.907941][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.919636][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.954022][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.964909][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.351534][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.661219][ T2658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.695943][ T2658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.749078][ T3656] loop1: detected capacity change from 0 to 512 [ 51.762475][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.932159][ T3656] ======================================================= [ 51.932159][ T3656] WARNING: The mand mount option has been deprecated and [ 51.932159][ T3656] and is ignored by this kernel. Remove the mand [ 51.932159][ T3656] option from the mount to silence this warning. [ 51.932159][ T3656] ======================================================= [ 52.153504][ T3620] Bluetooth: hci1: command 0x0419 tx timeout [ 53.618206][ T3620] Bluetooth: hci3: command 0x0419 tx timeout [ 53.633281][ T3620] Bluetooth: hci2: command 0x0419 tx timeout [ 53.643404][ T3620] Bluetooth: hci4: command 0x0419 tx timeout [ 53.650399][ T3620] Bluetooth: hci0: command 0x0419 tx timeout [ 53.771795][ T3656] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.821668][ T3656] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 1: comm syz.1.2: invalid block [ 53.882833][ T3656] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2: couldn't read orphan inode 11 (err -117) [ 53.898275][ T3656] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000000400,jqfmt=vfsv0,abort,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 54.170296][ T3679] netlink: 'syz.4.6': attribute type 15 has an invalid length. [ 54.270407][ T3679] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.661977][ T3680] device veth1_macvtap left promiscuous mode [ 55.681266][ T3683] binder: 3677:3683 ioctl 4018620d 0 returned -22 [ 55.726607][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 55.738720][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 55.781232][ T3680] syz.1.2 (3680) used greatest stack depth: 19616 bytes left [ 56.394045][ T3700] process 'syz.1.11' launched './file1' with NULL argv: empty string added [ 57.062260][ T3702] loop0: detected capacity change from 0 to 2048 [ 57.135746][ T3686] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.173989][ T3704] loop1: detected capacity change from 0 to 512 [ 57.214291][ T3702] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.333341][ T3704] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.359769][ T3704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.938987][ T3704] EXT4-fs (loop1): 1 truncate cleaned up [ 57.945052][ T3704] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 58.061520][ T3686] usb 5-1: Using ep0 maxpacket: 32 [ 58.068371][ T3614] Bluetooth: hci5: command 0x1001 tx timeout [ 58.075061][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 58.345533][ T3686] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 58.360364][ T3686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.385328][ T3686] usb 5-1: Product: syz [ 58.394866][ T3686] usb 5-1: Manufacturer: syz [ 58.410854][ T3686] usb 5-1: SerialNumber: syz [ 58.469798][ T3686] usb 5-1: config 0 descriptor?? [ 58.524986][ T3686] usb 5-1: bad CDC descriptors [ 58.541393][ T3686] usb 5-1: unsupported MDLM descriptors [ 58.814636][ T1965] usb 5-1: USB disconnect, device number 2 [ 59.227337][ T3723] loop3: detected capacity change from 0 to 512 [ 59.328118][ T3723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.448462][ T3723] EXT4-fs (loop3): 1 truncate cleaned up [ 59.462051][ T3723] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 60.198746][ T3686] Bluetooth: hci5: command 0x1009 tx timeout [ 62.262998][ T3755] loop1: detected capacity change from 0 to 256 [ 64.368050][ T3769] loop3: detected capacity change from 0 to 512 [ 64.462889][ T3769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.523208][ T3769] EXT4-fs (loop3): 1 truncate cleaned up [ 64.536918][ T3769] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 64.600437][ T3772] loop1: detected capacity change from 0 to 2048 [ 64.797657][ T3760] chnl_net:caif_netlink_parms(): no params data found [ 64.862614][ T3772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.032651][ T2658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.217249][ T2658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.447387][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.746634][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.780279][ T3760] device bridge_slave_0 entered promiscuous mode [ 65.824508][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.862385][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.883619][ T3760] device bridge_slave_1 entered promiscuous mode [ 65.892386][ T1965] Bluetooth: hci6: command 0x0409 tx timeout [ 66.036583][ T2658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.117114][ T3760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.137664][ T3760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.184532][ T3799] loop1: detected capacity change from 0 to 2048 [ 66.203480][ T2658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.270637][ T3760] team0: Port device team_slave_0 added [ 66.273605][ T3799] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 66.304345][ T3760] team0: Port device team_slave_1 added [ 66.418845][ T3760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.441109][ T3760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.638668][ T3760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.674255][ T3760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.682161][ T3760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.727297][ T3760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.761307][ T3801] capability: warning: `syz.1.37' uses deprecated v2 capabilities in a way that may be insecure [ 67.289155][ T3760] device hsr_slave_0 entered promiscuous mode [ 67.317357][ T3760] device hsr_slave_1 entered promiscuous mode [ 67.330954][ T3760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.355337][ T3760] Cannot create hsr debugfs directory [ 67.411663][ T3815] loop1: detected capacity change from 0 to 512 [ 67.519353][ T3815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.678165][ T3815] EXT4-fs (loop1): 1 truncate cleaned up [ 67.697672][ T3815] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 67.975729][ T1965] Bluetooth: hci6: command 0x041b tx timeout [ 68.705205][ C0] sched: RT throttling activated [ 69.069765][ T3841] ptrace attach of "./syz-executor exec"[3572] was attempted by "./syz-executor exec"[3841] [ 69.311931][ T3846] loop1: detected capacity change from 0 to 512 [ 69.370776][ T3846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.394113][ T3848] loop4: detected capacity change from 0 to 512 [ 70.101948][ T3854] loop3: detected capacity change from 0 to 512 [ 70.116761][ T1965] Bluetooth: hci6: command 0x040f tx timeout [ 70.124619][ T3846] EXT4-fs (loop1): 1 truncate cleaned up [ 70.140950][ T3846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.186144][ T3854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.259630][ T3854] EXT4-fs (loop3): 1 truncate cleaned up [ 70.269668][ T3846] EXT4-fs (loop1): shut down requested (2) [ 70.273820][ T3854] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 70.662111][ T3875] loop1: detected capacity change from 0 to 2048 [ 70.689641][ T3873] loop0: detected capacity change from 0 to 2048 [ 70.739801][ T3760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.757148][ T3875] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 70.780416][ T3873] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 70.815512][ T26] audit: type=1326 audit(1726645002.377:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3872 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999d559ef9 code=0x7ffc0000 [ 70.933809][ T3760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.965612][ T3873] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.973152][ T26] audit: type=1326 audit(1726645002.457:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3872 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f999d559ef9 code=0x7ffc0000 [ 71.055407][ T26] audit: type=1326 audit(1726645002.607:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3872 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999d559ef9 code=0x7ffc0000 [ 71.088665][ T3760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.190844][ T3760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.316619][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329434][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.293199][ T1965] Bluetooth: hci6: command 0x0419 tx timeout [ 72.714418][ T2658] device hsr_slave_0 left promiscuous mode [ 72.736113][ T2658] device hsr_slave_1 left promiscuous mode [ 72.776047][ T2658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.783493][ T2658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.411585][ T2658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.419817][ T2658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.474127][ T2658] device bridge_slave_1 left promiscuous mode [ 73.516010][ T2658] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.650671][ T2658] device bridge_slave_0 left promiscuous mode [ 73.670512][ T2658] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.016611][ T2658] device veth1_macvtap left promiscuous mode [ 74.031000][ T2658] device veth0_macvtap left promiscuous mode [ 74.054509][ T2658] device veth1_vlan left promiscuous mode [ 74.079114][ T2658] device veth0_vlan left promiscuous mode [ 75.149700][ T2658] team0 (unregistering): Port device team_slave_1 removed [ 75.179219][ T2658] team0 (unregistering): Port device team_slave_0 removed [ 75.209773][ T2658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.241227][ T2658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.383615][ T2658] bond0 (unregistering): Released all slaves [ 75.786577][ T3760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.849187][ T3927] loop3: detected capacity change from 0 to 2048 [ 75.868888][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.915749][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.962985][ T3760] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.998803][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.015521][ T3927] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 76.035065][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.066794][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.074237][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.161872][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.200195][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.230058][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.290720][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.297968][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.619328][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.666209][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.815702][ T13] cfg80211: failed to load regulatory.db [ 76.837650][ T3760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.849060][ T3760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.881385][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.924252][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.945073][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.976550][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.994706][ T3948] loop3: detected capacity change from 0 to 1024 [ 77.001923][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.002650][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.003361][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.003883][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.004495][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.005120][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.221137][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.221263][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.249907][ T3760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.336014][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.336555][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.435599][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.436304][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.437012][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.437463][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.438810][ T3760] device veth0_vlan entered promiscuous mode [ 77.485017][ T3760] device veth1_vlan entered promiscuous mode [ 78.055134][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.195476][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.252342][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.267287][ T3760] device veth0_macvtap entered promiscuous mode [ 78.284467][ T3760] device veth1_macvtap entered promiscuous mode [ 78.311478][ T3968] loop3: detected capacity change from 0 to 512 [ 78.347729][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.368496][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.409431][ T3968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.433775][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.455167][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.475280][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.497104][ T3968] EXT4-fs (loop3): 1 truncate cleaned up [ 78.502803][ T3968] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 78.573907][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.645266][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.711345][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.753277][ T3760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.826809][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.898949][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.918314][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.943350][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.973688][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.995940][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.022494][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.044593][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.070391][ T3760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.114512][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.138181][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.146555][ T1965] kernel write not supported for file /64/net/sockstat (pid: 1965 comm: kworker/1:2) [ 79.161131][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.202331][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.226749][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.241198][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.260976][ T3760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.287114][ T3760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.320410][ T3760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.353137][ T3760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.501229][ T3666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.571135][ T3666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.599924][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.905741][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.931440][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.023477][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.124891][ T4000] loop4: detected capacity change from 0 to 2048 [ 80.255040][ T4000] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 81.285261][ T1075] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.525277][ T1075] usb 2-1: Using ep0 maxpacket: 16 [ 81.615309][ T3893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.677594][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 81.695659][ T1075] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.763732][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 81.785550][ T1075] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.839885][ T4021] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 81.978838][ T1075] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 82.001675][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.033819][ T1075] usb 2-1: Product: syz [ 82.055323][ T1075] usb 2-1: Manufacturer: syz [ 82.075329][ T1075] usb 2-1: SerialNumber: syz [ 82.125496][ T3893] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 82.133853][ T3893] usb 5-1: config 0 has no interface number 0 [ 82.140692][ T1075] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 82.167572][ T3893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 82.211027][ T3893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.240202][ T3893] usb 5-1: config 0 descriptor?? [ 82.351347][ T1075] usb 2-1: USB disconnect, device number 2 [ 83.195424][ T3893] usb 5-1: string descriptor 0 read error: -71 [ 83.213383][ T4033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 83.295669][ T3893] ath6kl: Failed to submit usb control message: -71 [ 83.312573][ T3893] ath6kl: unable to send the bmi data to the device: -71 [ 83.321928][ T26] audit: type=1326 audit(1726645014.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.347597][ T3893] ath6kl: Unable to send get target info: -71 [ 83.357764][ T26] audit: type=1326 audit(1726645014.917:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.382137][ T26] audit: type=1326 audit(1726645014.927:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.404696][ T26] audit: type=1326 audit(1726645014.927:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.436240][ T26] audit: type=1326 audit(1726645014.927:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.459608][ T3893] ath6kl: Failed to init ath6kl core: -71 [ 83.478532][ T26] audit: type=1326 audit(1726645014.947:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.505692][ T3893] ath6kl_usb: probe of 5-1:0.143 failed with error -71 [ 83.558012][ T3893] usb 5-1: USB disconnect, device number 3 [ 83.596344][ T26] audit: type=1326 audit(1726645014.947:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 83.634463][ T26] audit: type=1326 audit(1726645014.947:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4031 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d5bb7ef9 code=0x7ffc0000 [ 85.191523][ T4058] loop0: detected capacity change from 0 to 2048 [ 85.274378][ T4058] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 85.452378][ T4060] loop4: detected capacity change from 0 to 512 [ 85.491577][ T4060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.517199][ T4060] EXT4-fs (loop4): 1 truncate cleaned up [ 86.521414][ T4070] loop1: detected capacity change from 0 to 512 [ 86.525295][ T4060] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 86.585804][ T4074] device syzkaller0 entered promiscuous mode [ 86.692488][ T4070] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.88: casefold flag without casefold feature [ 86.711347][ T4070] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 86.723588][ T4070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.751489][ T4079] loop3: detected capacity change from 0 to 256 [ 86.799687][ T4070] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.88: Directory hole found for htree leaf block 0 [ 87.201240][ T1965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.238345][ T4079] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.324430][ T4084] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.88: Directory hole found for htree leaf block 0 [ 88.480335][ T4094] netlink: 76 bytes leftover after parsing attributes in process `syz.4.92'. [ 88.495435][ T1965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.566979][ T1965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.718975][ T1965] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.739675][ T1965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.780571][ T1965] usb 1-1: SerialNumber: syz [ 89.272865][ T1965] usb 1-1: 0:2 : does not exist [ 89.295314][ T1965] usb 1-1: unit 5: unexpected type 0x0a [ 89.337517][ T4074] udc-core: couldn't find an available UDC or it's busy [ 89.375368][ T4074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.899194][ T4111] loop4: detected capacity change from 0 to 256 [ 89.935520][ T4111] exfat: Deprecated parameter 'utf8' [ 89.944449][ T4111] exfat: Deprecated parameter 'utf8' [ 89.965671][ T4111] exfat: Deprecated parameter 'utf8' [ 90.034878][ T4111] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 90.340249][ T4115] loop2: detected capacity change from 0 to 2048 [ 90.432406][ T4115] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 91.209401][ T1965] usb 1-1: USB disconnect, device number 2 [ 91.642568][ T4124] loop1: detected capacity change from 0 to 256 [ 92.337695][ T4129] syz.3.103[4129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.337798][ T4129] syz.3.103[4129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.344253][ T4127] loop0: detected capacity change from 0 to 512 [ 92.375478][ T26] audit: type=1326 audit(1726645023.947:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4128 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785190cef9 code=0x7ffc0000 [ 92.409720][ T26] audit: type=1326 audit(1726645023.967:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4128 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f785190cef9 code=0x7ffc0000 [ 92.437050][ T26] audit: type=1326 audit(1726645023.967:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4128 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785190cef9 code=0x7ffc0000 [ 92.525291][ T26] audit: type=1326 audit(1726645023.967:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4128 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f785190cef9 code=0x7ffc0000 [ 92.607184][ T4127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.628139][ T26] audit: type=1326 audit(1726645023.967:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4128 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785190cef9 code=0x7ffc0000 [ 92.672171][ T4127] EXT4-fs (loop0): 1 truncate cleaned up [ 92.694917][ T4127] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 92.923553][ T1965] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.225835][ T1965] usb 4-1: Using ep0 maxpacket: 16 [ 93.380256][ T1965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.421434][ T1965] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 93.489446][ T1965] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.520185][ T1965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.579374][ T1965] usb 4-1: config 0 descriptor?? [ 93.648380][ T1965] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 94.036959][ T4150] fuse: Bad value for 'fd' [ 94.276717][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 94.456228][ T4158] loop2: detected capacity change from 0 to 2048 [ 94.602596][ T4158] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 96.075622][ T21] usb 4-1: USB disconnect, device number 2 [ 96.859013][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.057034][ T4184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 97.223871][ T4190] loop1: detected capacity change from 0 to 512 [ 97.372433][ T4190] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.515561][ T21] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 97.561057][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.601130][ T21] usb 4-1: config 0 descriptor?? [ 97.685032][ T4190] EXT4-fs (loop1): 1 truncate cleaned up [ 97.695441][ T4190] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 98.145800][ T21] usb 4-1: Cannot set MAC address [ 98.254799][ T21] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 98.337395][ T21] usb 4-1: USB disconnect, device number 3 [ 98.954531][ T4258] loop0: detected capacity change from 0 to 512 [ 99.022145][ T4260] overlayfs: missing 'lowerdir' [ 99.080668][ T4258] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.122450][ T4258] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 99.423779][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.124'. [ 99.433062][ T3620] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.638655][ T4270] loop1: detected capacity change from 0 to 2048 [ 99.657214][ T4270] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 100.123296][ T4274] loop4: detected capacity change from 0 to 512 [ 100.187744][ T3620] usb 3-1: Using ep0 maxpacket: 8 [ 100.217851][ T4274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.307073][ T4274] EXT4-fs (loop4): 1 truncate cleaned up [ 100.315667][ T4274] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 100.406910][ T3620] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 100.454152][ T3620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.745950][ T3620] usb 3-1: config 0 descriptor?? [ 101.150484][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 101.182387][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 101.277486][ T4290] xt_bpf: check failed: parse error [ 101.361963][ T4290] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 102.142239][ T4303] loop3: detected capacity change from 0 to 512 [ 102.290782][ T4303] EXT4-fs error (device loop3): __ext4_iget:4872: inode #14: block 1886221359: comm syz.3.137: invalid block [ 102.358428][ T4303] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.137: couldn't read orphan inode 14 (err -117) [ 102.375930][ T4303] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,auto_da_alloc,nouid32,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 102.442582][ T4303] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 102.870012][ T4310] netlink: 'syz.4.138': attribute type 15 has an invalid length. [ 103.410381][ T3614] Bluetooth: hci4: command 0x1003 tx timeout [ 103.416663][ T3582] Bluetooth: hci4: sending frame failed (-49) [ 103.494874][ T4312] loop3: detected capacity change from 0 to 256 [ 103.825547][ T3620] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 103.851612][ T3620] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 103.881443][ T3620] asix: probe of 3-1:0.0 failed with error -71 [ 103.924931][ T3620] usb 3-1: USB disconnect, device number 2 [ 104.020429][ T4317] loop2: detected capacity change from 0 to 2048 [ 104.806180][ T4317] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 105.846082][ T3614] Bluetooth: hci4: command 0x1001 tx timeout [ 105.853811][ T3582] Bluetooth: hci4: sending frame failed (-49) [ 106.042110][ T4335] loop3: detected capacity change from 0 to 512 [ 106.083554][ T4337] loop0: detected capacity change from 0 to 512 [ 106.177362][ T4335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.188184][ T4337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.225811][ T4337] EXT4-fs (loop0): 1 truncate cleaned up [ 106.236239][ T4335] EXT4-fs (loop3): 1 truncate cleaned up [ 106.244323][ T4337] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 106.296837][ T4335] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 107.562698][ T4348] netlink: 'syz.2.151': attribute type 15 has an invalid length. [ 107.636581][ T26] audit: type=1326 audit(1726645039.207:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.666438][ T4354] fuse: Unknown parameter '0x0000000000000003' [ 107.678257][ T26] audit: type=1326 audit(1726645039.227:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.712448][ T26] audit: type=1326 audit(1726645039.227:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.769836][ T26] audit: type=1326 audit(1726645039.227:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.799700][ T26] audit: type=1326 audit(1726645039.227:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.838459][ T26] audit: type=1326 audit(1726645039.227:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.861177][ T26] audit: type=1326 audit(1726645039.237:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.890008][ T3686] Bluetooth: hci4: command 0x1009 tx timeout [ 107.899140][ T26] audit: type=1326 audit(1726645039.237:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.923575][ T26] audit: type=1326 audit(1726645039.237:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 107.946257][ T26] audit: type=1326 audit(1726645039.237:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 109.808516][ T4372] loop4: detected capacity change from 0 to 2048 [ 109.881113][ T4372] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 110.325735][ T4364] loop0: detected capacity change from 0 to 40427 [ 110.540522][ T4364] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.610950][ T4364] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.663794][ T4364] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.898908][ T4364] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.917002][ T4364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.533312][ T4395] netlink: 'syz.4.164': attribute type 15 has an invalid length. [ 113.563219][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.563274][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.593486][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.617199][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.624786][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.658584][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.668653][ T3572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 113.832092][ T4401] loop2: detected capacity change from 0 to 512 [ 113.962845][ T4401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.009528][ T4401] EXT4-fs (loop2): 1 truncate cleaned up [ 114.015518][ T4401] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 114.051455][ T4396] chnl_net:caif_netlink_parms(): no params data found [ 114.104036][ T4225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.211172][ T4225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.470409][ T4413] loop0: detected capacity change from 0 to 16 [ 114.504723][ T4225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.858769][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.916116][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.989580][ T4396] device bridge_slave_0 entered promiscuous mode [ 115.181595][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.194326][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.209851][ T4396] device bridge_slave_1 entered promiscuous mode [ 115.270030][ T4396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.298195][ T4413] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff18446744073709551615°íi‚®(ŒíˆµFï"p' [ 115.418736][ T4396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.847716][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 115.919088][ T4225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.006033][ T4396] team0: Port device team_slave_0 added [ 116.023235][ T4396] team0: Port device team_slave_1 added [ 116.041063][ T4427] loop2: detected capacity change from 0 to 2048 [ 116.074869][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.082841][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.365552][ T4427] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 116.374937][ T4396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.492224][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.507292][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.585295][ T4396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.723178][ T3612] Bluetooth: hci4: command 0x041b tx timeout [ 118.971617][ T4396] device hsr_slave_0 entered promiscuous mode [ 118.985692][ T4396] device hsr_slave_1 entered promiscuous mode [ 118.993663][ T4396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.001963][ T4396] Cannot create hsr debugfs directory [ 119.546012][ T4445] netlink: 'syz.4.176': attribute type 15 has an invalid length. [ 119.794959][ T4459] loop0: detected capacity change from 0 to 512 [ 119.883643][ T4459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.936321][ T4459] EXT4-fs (loop0): 1 truncate cleaned up [ 119.942101][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 120.531895][ T4396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.543794][ T4396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.576398][ T4396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.609553][ T4396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.855545][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 122.287099][ T4225] device hsr_slave_0 left promiscuous mode [ 122.313166][ T4225] device hsr_slave_1 left promiscuous mode [ 122.495510][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.511871][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.731307][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.802092][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.863387][ T4225] device bridge_slave_1 left promiscuous mode [ 122.900184][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.922311][ T4520] loop2: detected capacity change from 0 to 2048 [ 122.929096][ T3893] Bluetooth: hci4: command 0x0419 tx timeout [ 122.969992][ T4225] device bridge_slave_0 left promiscuous mode [ 122.977938][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.013604][ T4520] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 123.894113][ T4225] device veth0_macvtap left promiscuous mode [ 123.921298][ T4225] device veth1_vlan left promiscuous mode [ 123.930897][ T4225] device veth0_vlan left promiscuous mode [ 124.622370][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 124.639543][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 124.655078][ T4225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.672720][ T4225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.754037][ T4225] bond0 (unregistering): Released all slaves [ 124.852912][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.864459][ T4536] netlink: 'syz.2.189': attribute type 15 has an invalid length. [ 124.923715][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.939687][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.994723][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.125785][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.173984][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.621526][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.628716][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.118515][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.144629][ T4553] loop0: detected capacity change from 0 to 512 [ 126.304728][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.349977][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.530004][ T4553] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.193: bad orphan inode 15 [ 126.561692][ T4553] ext4_test_bit(bit=14, block=5) = 0 [ 126.573392][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.580825][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.586729][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 126.606029][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.057700][ T4571] loop4: detected capacity change from 0 to 512 [ 127.085862][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.256193][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.304905][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.324877][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.334496][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.353259][ T4571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.354865][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.371962][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.385897][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.393765][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.425513][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 127.431190][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 127.455741][ T4577] loop3: detected capacity change from 0 to 2048 [ 127.481461][ T4577] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 127.495970][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.549194][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.475364][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.485009][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.515495][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.567056][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.581763][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.668351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.794482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.845034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.901020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.910170][ T4396] device veth0_vlan entered promiscuous mode [ 128.967577][ T4396] device veth1_vlan entered promiscuous mode [ 129.010108][ T4602] netlink: 'syz.2.201': attribute type 15 has an invalid length. [ 129.271263][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.289298][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.343374][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.407582][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.490564][ T4396] device veth0_macvtap entered promiscuous mode [ 129.508287][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.536452][ T4396] device veth1_macvtap entered promiscuous mode [ 129.587820][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.628883][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.659430][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.690416][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.722602][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.763854][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.794344][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.815706][ T4565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 129.839391][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.869259][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.887401][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.930554][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.979460][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.025201][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.086421][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.125200][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.135045][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.376006][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.432955][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.492267][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.566298][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.635365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.644005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.791469][ T4396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.831067][ T4396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.874199][ T4396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.925506][ T4396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.752811][ T4622] loop2: detected capacity change from 0 to 512 [ 131.785395][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.793604][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.823940][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.837017][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.851358][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.889807][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.922862][ T4624] loop0: detected capacity change from 0 to 2048 [ 131.950072][ T4622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.206: inode #1: comm syz.2.206: iget: illegal inode # [ 131.983896][ T4624] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 132.085284][ T4622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.206: error while reading EA inode 1 err=-117 [ 132.131489][ T4622] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.164924][ T4622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.206: inode #1: comm syz.2.206: iget: illegal inode # [ 132.239950][ T4622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.206: error while reading EA inode 1 err=-117 [ 132.275092][ T4630] loop1: detected capacity change from 0 to 512 [ 132.297559][ T4622] EXT4-fs (loop2): 1 orphan inode deleted [ 132.303546][ T4630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.326514][ T4622] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 132.687612][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736935][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777866][ T4630] EXT4-fs (loop1): 1 truncate cleaned up [ 132.783545][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 134.403335][ T4649] netlink: 'syz.0.213': attribute type 15 has an invalid length. [ 135.981143][ T4666] loop3: detected capacity change from 0 to 512 [ 136.040240][ T4665] loop0: detected capacity change from 0 to 1024 [ 136.057762][ T4666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.110781][ T4666] EXT4-fs (loop3): 1 truncate cleaned up [ 136.140194][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 136.230008][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 136.266081][ T4672] binder: 4668:4672 ioctl 4018620d 0 returned -22 [ 137.360808][ T4672] loop4: detected capacity change from 0 to 1024 [ 137.518419][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.541205][ T4680] loop3: detected capacity change from 0 to 2048 [ 137.587530][ T4684] syz.2.222[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.587623][ T4684] syz.2.222[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.620654][ T4680] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 137.852703][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 137.852717][ T26] audit: type=1800 audit(1726645069.417:50): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 139.012540][ T4700] loop1: detected capacity change from 0 to 512 [ 139.114331][ T4700] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 140.409541][ T4712] netlink: 'syz.0.227': attribute type 15 has an invalid length. [ 141.068214][ T4719] loop3: detected capacity change from 0 to 512 [ 141.540402][ T4727] loop1: detected capacity change from 0 to 512 [ 141.583353][ T4719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.659628][ T4727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.701940][ T4719] EXT4-fs (loop3): 1 truncate cleaned up [ 141.733506][ T4727] EXT4-fs (loop1): 1 truncate cleaned up [ 141.743704][ T4719] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 141.762393][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 143.732330][ T4730] loop2: detected capacity change from 0 to 256 [ 143.743518][ T4749] loop4: detected capacity change from 0 to 2048 [ 143.805012][ T4753] loop3: detected capacity change from 0 to 128 [ 143.818119][ T4749] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 143.851506][ T4730] FAT-fs (loop2): Directory bread(block 64) failed [ 143.865326][ T4730] FAT-fs (loop2): Directory bread(block 65) failed [ 143.875556][ T4730] FAT-fs (loop2): Directory bread(block 66) failed [ 143.892816][ T4730] FAT-fs (loop2): Directory bread(block 67) failed [ 143.903012][ T4730] FAT-fs (loop2): Directory bread(block 68) failed [ 143.933688][ T4730] FAT-fs (loop2): Directory bread(block 69) failed [ 143.945853][ T4753] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.955411][ T4730] FAT-fs (loop2): Directory bread(block 70) failed [ 143.964824][ T4730] FAT-fs (loop2): Directory bread(block 71) failed [ 144.051715][ T4753] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.121494][ T4730] FAT-fs (loop2): Directory bread(block 72) failed [ 144.128706][ T4730] FAT-fs (loop2): Directory bread(block 73) failed [ 145.235228][ T3614] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 145.447877][ T4769] netlink: 'syz.2.243': attribute type 15 has an invalid length. [ 145.914274][ T4779] loop2: detected capacity change from 0 to 512 [ 145.995517][ T3614] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 146.020320][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.042914][ T4779] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.450428][ T4779] EXT4-fs (loop2): 1 truncate cleaned up [ 146.493697][ T4779] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 146.727266][ T3614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 146.740325][ T3614] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 146.750270][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.763373][ T3614] usb 4-1: config 0 descriptor?? [ 147.171488][ T4794] loop4: detected capacity change from 0 to 2048 [ 147.263202][ T4794] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 147.790714][ T3614] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 147.803352][ T3614] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 147.810552][ T3614] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 147.818980][ T3614] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 147.826130][ T3614] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 147.834707][ T3614] uclogic 0003:5543:0781.0001: No inputs registered, leaving [ 147.864537][ T3614] uclogic 0003:5543:0781.0001: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input0 [ 147.906789][ T3614] usb 4-1: USB disconnect, device number 4 [ 148.603797][ T4810] loop3: detected capacity change from 0 to 512 [ 148.729506][ T4810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.935689][ T4810] EXT4-fs (loop3): 1 truncate cleaned up [ 148.941380][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 150.018729][ T4827] netlink: 'syz.4.258': attribute type 15 has an invalid length. [ 151.492142][ T4845] loop3: detected capacity change from 0 to 512 [ 151.591305][ T4845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.646538][ T4845] EXT4-fs (loop3): 1 truncate cleaned up [ 151.652240][ T4845] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 152.235318][ T3614] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.606458][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.641523][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.675285][ T3614] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 152.703742][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.790645][ T3614] usb 2-1: config 0 descriptor?? [ 153.024869][ T4862] loop4: detected capacity change from 0 to 2048 [ 153.025349][ T4856] loop2: detected capacity change from 0 to 40427 [ 153.119601][ T4862] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 153.181122][ T4856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.310219][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 153.338266][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 153.809100][ T4856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.041882][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 154.048833][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 154.055993][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 154.062799][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 154.069682][ T3614] asus 0003:0B05:17E0.0002: unknown main item tag 0x0 [ 154.112163][ T4873] loop4: detected capacity change from 0 to 512 [ 154.118968][ T3614] asus 0003:0B05:17E0.0002: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 154.140033][ T3614] asus 0003:0B05:17E0.0002: Asus input not registered [ 154.226941][ T3614] asus: probe of 0003:0B05:17E0.0002 failed with error -12 [ 154.254982][ T3614] usb 2-1: USB disconnect, device number 3 [ 154.337233][ T4873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.426300][ T4877] netlink: 'syz.1.273': attribute type 15 has an invalid length. [ 154.652497][ T4873] EXT4-fs (loop4): 1 truncate cleaned up [ 154.675891][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 158.178046][ T4915] loop0: detected capacity change from 0 to 2048 [ 158.264790][ T4917] loop1: detected capacity change from 0 to 512 [ 158.278596][ T4915] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 158.353281][ T4917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.382556][ T4917] EXT4-fs (loop1): 1 truncate cleaned up [ 158.395295][ T4917] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 159.542530][ T4928] loop2: detected capacity change from 0 to 2048 [ 159.579018][ T4931] loop1: detected capacity change from 0 to 512 [ 159.708542][ T4931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.847671][ T4938] netlink: 'syz.4.287': attribute type 15 has an invalid length. [ 160.145499][ T4928] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 160.166714][ T4931] EXT4-fs (loop1): 1 truncate cleaned up [ 160.172686][ T4931] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 160.841200][ T4243] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.908675][ T4243] EXT4-fs (loop2): Remounting filesystem read-only [ 161.985565][ T4964] loop2: detected capacity change from 0 to 512 [ 162.029136][ T4964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.092864][ T4964] EXT4-fs (loop2): 1 truncate cleaned up [ 162.108199][ T4964] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 162.209561][ T4967] loop1: detected capacity change from 0 to 256 [ 164.247469][ T4990] loop4: detected capacity change from 0 to 2048 [ 164.304709][ T4990] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 164.376253][ T4992] loop2: detected capacity change from 0 to 4096 [ 164.516936][ T4992] EXT4-fs (loop2): Ignoring removed nobh option [ 164.542376][ T4992] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,nobh,i_version,,errors=continue. Quota mode: writeback. [ 164.565396][ T4984] netlink: 'syz.3.300': attribute type 15 has an invalid length. [ 166.092659][ T5006] loop3: detected capacity change from 0 to 512 [ 166.209132][ T5006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.333319][ T5006] EXT4-fs (loop3): 1 truncate cleaned up [ 166.342587][ T5006] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 167.208598][ T5019] loop1: detected capacity change from 0 to 512 [ 167.458608][ T5023] loop4: detected capacity change from 0 to 512 [ 167.519130][ T5019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.574977][ T5019] EXT4-fs (loop1): 1 truncate cleaned up [ 167.591330][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 167.669638][ T5023] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.156704][ T5033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.164337][ T5033] IPv6: NLM_F_CREATE should be set when creating new route [ 168.195407][ T5023] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 168.713054][ T5023] EXT4-fs (loop4): 1 truncate cleaned up [ 168.868543][ T5023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.355361][ T5050] netlink: 'syz.1.316': attribute type 15 has an invalid length. [ 170.689070][ T5055] loop0: detected capacity change from 0 to 2048 [ 171.115175][ T3616] Bluetooth: hci2: command 0x0406 tx timeout [ 171.126786][ T5055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.136290][ T3616] Bluetooth: hci1: command 0x0406 tx timeout [ 171.151894][ T26] audit: type=1800 audit(1726645102.717:51): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.318" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 171.176700][ T3616] Bluetooth: hci0: command 0x0406 tx timeout [ 171.900034][ T5071] loop3: detected capacity change from 0 to 512 [ 172.126107][ T5071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.190628][ T5079] loop0: detected capacity change from 0 to 512 [ 172.210577][ T5071] EXT4-fs (loop3): 1 truncate cleaned up [ 172.235027][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 172.317696][ T5079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.410813][ T5079] EXT4-fs (loop0): 1 truncate cleaned up [ 172.435458][ T5079] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 175.234619][ T5113] netlink: 'syz.1.331': attribute type 15 has an invalid length. [ 177.254772][ T5135] loop0: detected capacity change from 0 to 512 [ 177.309805][ T5138] loop2: detected capacity change from 0 to 512 [ 177.381435][ T5135] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.412790][ T5138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.546269][ T5138] EXT4-fs (loop2): 1 truncate cleaned up [ 177.551950][ T5138] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 177.569881][ T5135] EXT4-fs (loop0): 1 truncate cleaned up [ 177.610794][ T5135] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 179.558631][ T5163] netlink: 'syz.2.347': attribute type 15 has an invalid length. [ 180.133244][ T26] audit: type=1326 audit(1726645111.697:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.212612][ T26] audit: type=1326 audit(1726645111.697:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.225332][ T1075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.272729][ T26] audit: type=1326 audit(1726645111.727:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.332761][ T26] audit: type=1326 audit(1726645111.727:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.394149][ T26] audit: type=1326 audit(1726645111.727:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.452527][ T26] audit: type=1326 audit(1726645111.727:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.511572][ T26] audit: type=1326 audit(1726645111.727:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.515237][ T1075] usb 5-1: Using ep0 maxpacket: 16 [ 180.614360][ T26] audit: type=1326 audit(1726645111.727:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 180.718504][ T1075] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.740851][ T1075] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.801990][ T1075] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 180.851675][ T1075] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 180.885599][ T1075] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 181.035384][ T1075] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.044497][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.095372][ T1075] usb 5-1: can't set config #1, error -71 [ 181.117426][ T1075] usb 5-1: USB disconnect, device number 4 [ 182.740164][ T5189] loop4: detected capacity change from 0 to 512 [ 182.869731][ T5189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.900833][ T5195] loop0: detected capacity change from 0 to 512 [ 182.919876][ T5189] EXT4-fs (loop4): 1 truncate cleaned up [ 182.926261][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 183.536894][ T5205] netlink: 87 bytes leftover after parsing attributes in process `syz.2.355'. [ 183.560432][ T5205] fuse: Bad value for 'user_id' [ 184.140343][ T5195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.232269][ T5195] EXT4-fs (loop0): 1 truncate cleaned up [ 184.242779][ T5195] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 184.505725][ T5201] netlink: 'syz.1.360': attribute type 15 has an invalid length. [ 185.403053][ T5223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.056467][ T3620] Bluetooth: hci6: command 0x0406 tx timeout [ 186.383256][ T5234] loop3: detected capacity change from 0 to 2048 [ 187.010955][ T5234] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.367: casefold flag without casefold feature [ 187.029874][ T5234] EXT4-fs (loop3): get root inode failed [ 187.068591][ T5234] EXT4-fs (loop3): mount failed [ 187.918498][ T5226] loop1: detected capacity change from 0 to 40427 [ 189.401514][ T5260] loop2: detected capacity change from 0 to 512 [ 189.624426][ T5260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.725446][ T5267] netlink: 'syz.4.376': attribute type 15 has an invalid length. [ 190.336374][ T5260] EXT4-fs (loop2): 1 truncate cleaned up [ 190.424936][ T5260] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 191.385067][ T5278] loop4: detected capacity change from 0 to 512 [ 191.471006][ T5278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.560162][ T5278] EXT4-fs (loop4): 1 truncate cleaned up [ 191.575244][ T5278] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 192.393239][ T5287] loop1: detected capacity change from 0 to 128 [ 194.140067][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382073][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.057249][ T5314] netlink: 'syz.3.389': attribute type 15 has an invalid length. [ 196.210038][ T5321] loop1: detected capacity change from 0 to 512 [ 196.308964][ T5329] loop2: detected capacity change from 0 to 512 [ 196.332270][ T5321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.388699][ T5329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.399149][ T5321] EXT4-fs (loop1): 1 truncate cleaned up [ 196.405217][ T5321] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 196.476553][ T5329] EXT4-fs (loop2): 1 truncate cleaned up [ 196.565472][ T5329] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 201.178703][ T5368] netlink: 'syz.2.405': attribute type 15 has an invalid length. [ 201.221819][ T5373] loop3: detected capacity change from 0 to 512 [ 201.469866][ T5373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.584189][ T5373] EXT4-fs (loop3): 1 truncate cleaned up [ 201.592721][ T5373] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 202.063893][ T5389] loop4: detected capacity change from 0 to 512 [ 202.149941][ T5389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.234178][ T5389] EXT4-fs (loop4): 1 truncate cleaned up [ 202.251163][ T5389] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 203.695324][ T3612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 204.235968][ T3612] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 204.389993][ T3612] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 204.847057][ T3612] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 204.857336][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.041287][ T5404] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.132129][ T5418] netlink: 'syz.0.418': attribute type 15 has an invalid length. [ 205.800142][ T5428] loop0: detected capacity change from 0 to 1024 [ 205.905450][ T3612] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 205.923681][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 205.952049][ T3612] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 205.970043][ T3612] usb 2-1: USB disconnect, device number 4 [ 205.976095][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 206.455464][ T26] audit: type=1800 audit(1726645137.997:60): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 206.585383][ T3612] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 206.868311][ T5443] loop0: detected capacity change from 0 to 512 [ 206.943817][ T5443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.008413][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.045277][ T5443] EXT4-fs (loop0): 1 truncate cleaned up [ 207.164829][ T5443] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 207.210960][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.221447][ T3612] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 207.230639][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.253295][ T3612] usb 2-1: config 0 descriptor?? [ 207.425369][ T3612] usb 2-1: can't set config #0, error -71 [ 207.445370][ T3612] usb 2-1: USB disconnect, device number 5 [ 208.057188][ T5455] loop3: detected capacity change from 0 to 512 [ 208.190573][ T5455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.444046][ T5455] EXT4-fs (loop3): 1 truncate cleaned up [ 208.537264][ T5455] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 210.684016][ T5475] loop0: detected capacity change from 0 to 256 [ 211.135283][ T26] audit: type=1326 audit(1726645142.697:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.340356][ T26] audit: type=1326 audit(1726645142.697:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.509888][ T26] audit: type=1326 audit(1726645142.697:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.539572][ T26] audit: type=1326 audit(1726645142.697:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.646470][ T5491] netlink: 'syz.3.431': attribute type 15 has an invalid length. [ 211.830652][ T26] audit: type=1326 audit(1726645142.697:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.860090][ T5496] loop2: detected capacity change from 0 to 256 [ 211.945322][ T26] audit: type=1326 audit(1726645142.697:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 211.978246][ T5496] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.151899][ T5496] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 212.170629][ T5502] loop3: detected capacity change from 0 to 512 [ 212.177861][ T26] audit: type=1326 audit(1726645142.697:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 212.184877][ T5496] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.256772][ T26] audit: type=1326 audit(1726645142.697:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953abb4ef9 code=0x7ffc0000 [ 212.289864][ T5502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.305267][ T26] audit: type=1326 audit(1726645142.697:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f953abb6e17 code=0x7ffc0000 [ 212.342138][ T26] audit: type=1326 audit(1726645142.697:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f953abb6d8c code=0x7ffc0000 [ 212.394845][ T26] audit: type=1326 audit(1726645142.697:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f953abb6cc4 code=0x7ffc0000 [ 212.444785][ T26] audit: type=1326 audit(1726645142.697:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f953abb6cc4 code=0x7ffc0000 [ 212.508223][ T5502] EXT4-fs (loop3): 1 truncate cleaned up [ 212.514176][ T5502] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 213.135345][ T5512] loop4: detected capacity change from 0 to 512 [ 213.226599][ T5512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.318918][ T5512] EXT4-fs (loop4): 1 truncate cleaned up [ 213.338046][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 213.697558][ T5522] loop2: detected capacity change from 0 to 2048 [ 214.142043][ T5527] loop1: detected capacity change from 0 to 2048 [ 214.506088][ T5527] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 214.557302][ T5527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.890210][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.065408][ T5544] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 215.724247][ T5549] loop1: detected capacity change from 0 to 2048 [ 215.795212][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 215.875566][ T5549] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 215.918439][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.936278][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 215.950143][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.961746][ T13] usb 5-1: config 0 descriptor?? [ 216.020594][ T5554] netlink: 'syz.2.450': attribute type 15 has an invalid length. [ 216.036365][ T13] hub 5-1:0.0: USB hub found [ 216.255482][ T13] hub 5-1:0.0: 2 ports detected [ 217.857650][ T13] hub 5-1:0.0: set hub depth failed [ 217.902874][ T13] usb 5-1: USB disconnect, device number 5 [ 218.135793][ T5566] syz.0.456[5566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.135888][ T5566] syz.0.456[5566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.175869][ T5568] loop0: detected capacity change from 0 to 16 [ 218.219438][ T5570] loop3: detected capacity change from 0 to 512 [ 218.230436][ T5568] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 218.278760][ T5570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.300677][ T5570] EXT4-fs (loop3): 1 truncate cleaned up [ 218.306654][ T5570] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 218.376684][ T5574] loop2: detected capacity change from 0 to 512 [ 218.483448][ T5574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.982212][ T5574] EXT4-fs (loop2): 1 truncate cleaned up [ 219.108758][ T5574] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 221.351366][ T5605] loop2: detected capacity change from 0 to 2048 [ 221.957566][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.009872][ T5622] netlink: 'syz.3.469': attribute type 15 has an invalid length. [ 223.013518][ T5624] loop2: detected capacity change from 0 to 2048 [ 223.141851][ T5624] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 223.164394][ T5628] loop1: detected capacity change from 0 to 512 [ 223.391075][ T5628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.456409][ T5628] EXT4-fs (loop1): 1 truncate cleaned up [ 223.462165][ T5628] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 224.131906][ T5637] loop0: detected capacity change from 0 to 512 [ 224.228752][ T5637] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.284094][ T5637] EXT4-fs (loop0): 1 truncate cleaned up [ 224.301558][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 225.136033][ T5645] loop1: detected capacity change from 0 to 128 [ 225.197074][ T5645] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.240697][ T5645] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.541083][ T4225] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.485429][ T3613] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.127331][ T5663] loop2: detected capacity change from 0 to 2048 [ 227.485635][ T3613] usb 5-1: Using ep0 maxpacket: 32 [ 227.520280][ T5663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.560334][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 227.560346][ T26] audit: type=1800 audit(1726645159.127:105): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.483" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 227.785417][ T3613] usb 5-1: New USB device found, idVendor=fd86, idProduct=2248, bcdDevice=75.5b [ 227.804855][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.839696][ T3613] usb 5-1: Product: syz [ 227.854652][ T3613] usb 5-1: Manufacturer: syz [ 227.873038][ T3613] usb 5-1: SerialNumber: syz [ 227.883880][ T5677] loop2: detected capacity change from 0 to 512 [ 227.899607][ T3613] usb 5-1: config 0 descriptor?? [ 227.950268][ T5677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.966727][ T3613] usb-storage 5-1:0.0: USB Mass Storage device detected [ 228.149129][ T5677] EXT4-fs (loop2): 1 truncate cleaned up [ 228.170966][ T3613] usb 5-1: USB disconnect, device number 6 [ 228.178167][ T5677] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 229.468336][ T5692] loop0: detected capacity change from 0 to 2048 [ 229.703861][ T5692] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 230.427045][ T5692] binder: BINDER_SET_CONTEXT_MGR already set [ 230.433472][ T5692] binder: 5691:5692 ioctl 4018620d 20000040 returned -16 [ 230.644279][ T5704] loop1: detected capacity change from 0 to 256 [ 230.712415][ T5706] loop3: detected capacity change from 0 to 512 [ 230.772407][ T5704] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 230.800001][ T5706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.844976][ T5706] EXT4-fs (loop3): 1 truncate cleaned up [ 230.872458][ T5706] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 232.085260][ C0] ------------[ cut here ]------------ [ 232.085317][ C0] [ 232.085320][ C0] ====================================================== [ 232.085325][ C0] WARNING: possible circular locking dependency detected [ 232.085329][ C0] 5.15.167-syzkaller #0 Not tainted [ 232.085337][ C0] ------------------------------------------------------ [ 232.085341][ C0] syz.1.498/5720 is trying to acquire lock: [ 232.085349][ C0] ffffffff8c7fc4b8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 232.085393][ C0] [ 232.085393][ C0] but task is already holding lock: [ 232.085397][ C0] ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 232.085433][ C0] [ 232.085433][ C0] which lock already depends on the new lock. [ 232.085433][ C0] [ 232.085437][ C0] [ 232.085437][ C0] the existing dependency chain (in reverse order) is: [ 232.085441][ C0] [ 232.085441][ C0] -> #3 (&base->lock){-.-.}-{2:2}: [ 232.085461][ C0] lock_acquire+0x1db/0x4f0 [ 232.085475][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.085491][ C0] lock_timer_base+0x120/0x260 [ 232.085506][ C0] __mod_timer+0x1d6/0xeb0 [ 232.085520][ C0] queue_delayed_work_on+0x156/0x250 [ 232.085535][ C0] enqueue_task+0x2fe/0x3a0 [ 232.085549][ C0] wake_up_new_task+0x515/0xb60 [ 232.085564][ C0] kernel_clone+0x44e/0x960 [ 232.085577][ C0] kernel_thread+0x168/0x1e0 [ 232.085589][ C0] rest_init+0x21/0x330 [ 232.085605][ C0] start_kernel+0x48c/0x540 [ 232.085621][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 232.085636][ C0] [ 232.085636][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 232.085654][ C0] lock_acquire+0x1db/0x4f0 [ 232.085666][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 232.085680][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 232.085695][ C0] task_fork_fair+0x5d/0x350 [ 232.085708][ C0] sched_cgroup_fork+0x2d3/0x330 [ 232.085723][ C0] copy_process+0x224a/0x3ef0 [ 232.085736][ C0] kernel_clone+0x210/0x960 [ 232.085748][ C0] kernel_thread+0x168/0x1e0 [ 232.085760][ C0] rest_init+0x21/0x330 [ 232.085774][ C0] start_kernel+0x48c/0x540 [ 232.085788][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 232.085803][ C0] [ 232.085803][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 232.085822][ C0] lock_acquire+0x1db/0x4f0 [ 232.085833][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.085848][ C0] try_to_wake_up+0xae/0x1300 [ 232.085862][ C0] up+0x6e/0x90 [ 232.085874][ C0] __up_console_sem+0x11a/0x1e0 [ 232.085887][ C0] console_unlock+0x1145/0x12b0 [ 232.085906][ C0] vprintk_emit+0xbf/0x150 [ 232.085918][ C0] _printk+0xd1/0x120 [ 232.085935][ C0] set_capacity_and_notify+0x2bf/0x360 [ 232.085951][ C0] loop_set_size+0x44/0xa0 [ 232.085968][ C0] loop_configure+0xf27/0x1490 [ 232.085982][ C0] lo_ioctl+0x933/0x23d0 [ 232.085995][ C0] blkdev_ioctl+0x333/0x6b0 [ 232.086008][ C0] block_ioctl+0xb1/0xf0 [ 232.086021][ C0] __se_sys_ioctl+0xf1/0x160 [ 232.086034][ C0] do_syscall_64+0x3b/0xb0 [ 232.086047][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.086063][ C0] [ 232.086063][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 232.086082][ C0] validate_chain+0x1649/0x5930 [ 232.086096][ C0] __lock_acquire+0x1295/0x1ff0 [ 232.086108][ C0] lock_acquire+0x1db/0x4f0 [ 232.086120][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.086134][ C0] down_trylock+0x1c/0xa0 [ 232.086148][ C0] __down_trylock_console_sem+0x105/0x250 [ 232.086162][ C0] console_trylock_spinning+0x8a/0x3f0 [ 232.086175][ C0] vprintk_emit+0xa6/0x150 [ 232.086187][ C0] _printk+0xd1/0x120 [ 232.086201][ C0] report_bug+0x1e5/0x2e0 [ 232.086217][ C0] handle_bug+0x3d/0x70 [ 232.086229][ C0] exc_invalid_op+0x16/0x40 [ 232.086242][ C0] asm_exc_invalid_op+0x16/0x20 [ 232.086256][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 232.086270][ C0] bpf_probe_read_compat+0xe4/0x180 [ 232.086284][ C0] bpf_prog_f4543f5253660125+0x3d/0x444 [ 232.086296][ C0] bpf_trace_run3+0x2ce/0x380 [ 232.086310][ C0] enqueue_timer+0x3ae/0x540 [ 232.086321][ C0] __mod_timer+0xa60/0xeb0 [ 232.086335][ C0] call_timer_fn+0x16d/0x560 [ 232.086346][ C0] __run_timers+0x67c/0x890 [ 232.086358][ C0] run_timer_softirq+0x63/0xf0 [ 232.086372][ C0] handle_softirqs+0x3a7/0x930 [ 232.086385][ C0] __irq_exit_rcu+0x157/0x240 [ 232.086397][ C0] irq_exit_rcu+0x5/0x20 [ 232.086409][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 232.086424][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.086440][ C0] finish_lock_switch+0x91/0x100 [ 232.086454][ C0] finish_task_switch+0x134/0x630 [ 232.086468][ C0] __schedule+0x12cc/0x45b0 [ 232.086481][ C0] preempt_schedule_common+0x83/0xd0 [ 232.086494][ C0] preempt_schedule+0xd9/0xe0 [ 232.086506][ C0] preempt_schedule_thunk+0x16/0x18 [ 232.086521][ C0] try_to_wake_up+0x8a8/0x1300 [ 232.086535][ C0] wake_up_q+0x8b/0xd0 [ 232.086548][ C0] futex_wake+0x607/0x750 [ 232.086563][ C0] do_futex+0x1394/0x1810 [ 232.086577][ C0] __se_sys_futex+0x407/0x490 [ 232.086591][ C0] do_syscall_64+0x3b/0xb0 [ 232.086604][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.086620][ C0] [ 232.086620][ C0] other info that might help us debug this: [ 232.086620][ C0] [ 232.086627][ C0] Chain exists of: [ 232.086627][ C0] (console_sem).lock --> &rq->__lock --> &base->lock [ 232.086627][ C0] [ 232.086649][ C0] Possible unsafe locking scenario: [ 232.086649][ C0] [ 232.086652][ C0] CPU0 CPU1 [ 232.086656][ C0] ---- ---- [ 232.086659][ C0] lock(&base->lock); [ 232.086667][ C0] lock(&rq->__lock); [ 232.086677][ C0] lock(&base->lock); [ 232.086686][ C0] lock((console_sem).lock); [ 232.086695][ C0] [ 232.086695][ C0] *** DEADLOCK *** [ 232.086695][ C0] [ 232.086698][ C0] 3 locks held by syz.1.498/5720: [ 232.086706][ C0] #0: ffffc90000007be0 ((&app->join_timer)#2){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 232.086744][ C0] #1: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 232.086781][ C0] #2: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 232.086815][ C0] [ 232.086815][ C0] stack backtrace: [ 232.086820][ C0] CPU: 0 PID: 5720 Comm: syz.1.498 Not tainted 5.15.167-syzkaller #0 [ 232.086836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.086850][ C0] Call Trace: [ 232.086855][ C0] [ 232.086861][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 232.086878][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.086968][ C0] ? print_circular_bug+0x12b/0x1a0 [ 232.086988][ C0] check_noncircular+0x2f8/0x3b0 [ 232.087005][ C0] ? add_chain_block+0x850/0x850 [ 232.087019][ C0] ? lockdep_lock+0x11f/0x2a0 [ 232.087034][ C0] ? reacquire_held_locks+0x660/0x660 [ 232.087048][ C0] ? _find_first_zero_bit+0xcf/0xf0 [ 232.087066][ C0] validate_chain+0x1649/0x5930 [ 232.087085][ C0] ? mark_lock+0x98/0x340 [ 232.087101][ C0] ? reacquire_held_locks+0x660/0x660 [ 232.087114][ C0] ? data_push_tail+0x6de/0x700 [ 232.087132][ C0] ? desc_read+0x3d0/0x3d0 [ 232.087152][ C0] ? mark_lock+0x98/0x340 [ 232.087166][ C0] __lock_acquire+0x1295/0x1ff0 [ 232.087184][ C0] lock_acquire+0x1db/0x4f0 [ 232.087197][ C0] ? down_trylock+0x1c/0xa0 [ 232.087213][ C0] ? vsnprintf+0x1c70/0x1c70 [ 232.087230][ C0] ? read_lock_is_recursive+0x10/0x10 [ 232.087244][ C0] ? memcpy+0x3c/0x60 [ 232.087258][ C0] ? vsnprintf+0x1b93/0x1c70 [ 232.087274][ C0] ? _prb_commit+0x30a/0x3e0 [ 232.087289][ C0] ? prb_reserve+0x1240/0x1240 [ 232.087304][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.087320][ C0] ? down_trylock+0x1c/0xa0 [ 232.087334][ C0] ? _raw_spin_lock+0x40/0x40 [ 232.087349][ C0] ? vprintk_store+0xf1b/0x1300 [ 232.087364][ C0] down_trylock+0x1c/0xa0 [ 232.087380][ C0] __down_trylock_console_sem+0x105/0x250 [ 232.087395][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 232.087408][ C0] ? vprintk_emit+0xa6/0x150 [ 232.087422][ C0] ? console_trylock+0x70/0x70 [ 232.087439][ C0] ? vprintk_emit+0xa6/0x150 [ 232.087451][ C0] console_trylock_spinning+0x8a/0x3f0 [ 232.087466][ C0] ? vprintk_emit+0x150/0x150 [ 232.087479][ C0] ? reacquire_held_locks+0x660/0x660 [ 232.087492][ C0] ? validate_chain+0x112/0x5930 [ 232.087508][ C0] ? __update_load_avg_se+0x69c/0xaf0 [ 232.087523][ C0] vprintk_emit+0xa6/0x150 [ 232.087537][ C0] _printk+0xd1/0x120 [ 232.087592][ C0] ? mark_lock+0x98/0x340 [ 232.087606][ C0] ? report_bug+0x16e/0x2e0 [ 232.087622][ C0] ? panic+0x860/0x860 [ 232.087636][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 232.087653][ C0] ? find_bug+0x9c/0x350 [ 232.087669][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 232.087684][ C0] report_bug+0x1e5/0x2e0 [ 232.087702][ C0] handle_bug+0x3d/0x70 [ 232.087717][ C0] exc_invalid_op+0x16/0x40 [ 232.087732][ C0] asm_exc_invalid_op+0x16/0x20 [ 232.087749][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 232.087766][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 232.087779][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00010046 [ 232.087800][ C0] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff88807afc8000 [ 232.087812][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.087822][ C0] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: ffffed100f5f9001 [ 232.087833][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 232.087843][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 232.087855][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 232.087870][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 232.087888][ C0] bpf_probe_read_compat+0xe4/0x180 [ 232.087905][ C0] bpf_prog_f4543f5253660125+0x3d/0x444 [ 232.087920][ C0] bpf_trace_run3+0x2ce/0x380 [ 232.087935][ C0] ? bpf_trace_run2+0x340/0x340 [ 232.087948][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 232.087965][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 232.087981][ C0] ? _raw_spin_lock+0x40/0x40 [ 232.087995][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 232.088014][ C0] enqueue_timer+0x3ae/0x540 [ 232.088030][ C0] __mod_timer+0xa60/0xeb0 [ 232.088046][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 232.088065][ C0] ? mod_timer_pending+0x20/0x20 [ 232.088081][ C0] ? prandom_u32+0x218/0x260 [ 232.088100][ C0] call_timer_fn+0x16d/0x560 [ 232.088114][ C0] ? garp_init_applicant+0x470/0x470 [ 232.088131][ C0] ? __run_timers+0x890/0x890 [ 232.088146][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 232.088162][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 232.088177][ C0] ? garp_init_applicant+0x470/0x470 [ 232.088190][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 232.088206][ C0] ? garp_init_applicant+0x470/0x470 [ 232.088220][ C0] __run_timers+0x67c/0x890 [ 232.088237][ C0] ? detach_timer+0x2f0/0x2f0 [ 232.088250][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 232.088266][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 232.088284][ C0] run_timer_softirq+0x63/0xf0 [ 232.088301][ C0] handle_softirqs+0x3a7/0x930 [ 232.088318][ C0] ? __irq_exit_rcu+0x157/0x240 [ 232.088334][ C0] ? do_softirq+0x240/0x240 [ 232.088347][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 232.088363][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 232.088381][ C0] __irq_exit_rcu+0x157/0x240 [ 232.088395][ C0] ? irq_exit_rcu+0x20/0x20 [ 232.088414][ C0] irq_exit_rcu+0x5/0x20 [ 232.088427][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 232.088443][ C0] [ 232.088448][ C0] [ 232.088452][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.088470][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 232.088486][ C0] Code: 45 31 c9 68 97 9b 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 d6 48 e4 08 e8 51 3f 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 232.088498][ C0] RSP: 0018:ffffc90002157578 EFLAGS: 00000282 [ 232.088514][ C0] RAX: 6a4f2ae853eb2500 RBX: ffff888078a15974 RCX: ffffffff96868f03 [ 232.088526][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 232.088537][ C0] RBP: ffffc900021575f0 R08: ffffffff8186db50 R09: ffffed1017207461 [ 232.088547][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 232.088558][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 232.088571][ C0] ? trace_hardirqs_on+0x30/0x80 [ 232.088592][ C0] finish_task_switch+0x134/0x630 [ 232.088610][ C0] ? __switch_to_asm+0x34/0x60 [ 232.088627][ C0] __schedule+0x12cc/0x45b0 [ 232.088645][ C0] ? update_curr+0x10c/0xa50 [ 232.088665][ C0] ? release_firmware_map_entry+0x190/0x190 [ 232.088682][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 232.088698][ C0] ? preempt_schedule+0xd9/0xe0 [ 232.088713][ C0] preempt_schedule_common+0x83/0xd0 [ 232.088728][ C0] preempt_schedule+0xd9/0xe0 [ 232.088742][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 232.088757][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 232.088774][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 232.088795][ C0] ? _raw_spin_unlock+0x40/0x40 [ 232.088812][ C0] preempt_schedule_thunk+0x16/0x18 [ 232.088829][ C0] ? trace_hardirqs_on+0x30/0x80 [ 232.088845][ C0] try_to_wake_up+0x8a8/0x1300 [ 232.088866][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 232.088883][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 232.088897][ C0] ? plist_check_list+0x20d/0x220 [ 232.088912][ C0] ? plist_del+0x3ed/0x410 [ 232.088929][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 232.088946][ C0] wake_up_q+0x8b/0xd0 [ 232.088962][ C0] futex_wake+0x607/0x750 [ 232.088981][ C0] ? futex_wait+0x740/0x740 [ 232.088996][ C0] ? kasan_set_track+0x62/0x80 [ 232.089013][ C0] ? slab_free_freelist_hook+0xdd/0x160 [ 232.089029][ C0] ? kmem_cache_free+0x91/0x1f0 [ 232.089044][ C0] ? do_mkdirat+0x48a/0x520 [ 232.089057][ C0] ? __x64_sys_mkdir+0x6a/0x80 [ 232.089070][ C0] ? do_syscall_64+0x3b/0xb0 [ 232.089088][ C0] do_futex+0x1394/0x1810 [ 232.089106][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 232.089125][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 232.089146][ C0] ? read_lock_is_recursive+0x10/0x10 [ 232.089160][ C0] ? __context_tracking_exit+0x4c/0x80 [ 232.089176][ C0] ? do_mkdirat+0x48a/0x520 [ 232.089190][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 232.089205][ C0] __se_sys_futex+0x407/0x490 [ 232.089222][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 232.089239][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 232.089256][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 232.089272][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 232.089289][ C0] do_syscall_64+0x3b/0xb0 [ 232.089303][ C0] ? clear_bhb_loop+0x15/0x70 [ 232.089317][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.089334][ C0] RIP: 0033:0x7fc21fc73ef9 [ 232.089347][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.089358][ C0] RSP: 002b:00007fc21e0ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.089374][ C0] RAX: ffffffffffffffda RBX: 00007fc21fe2bf88 RCX: 00007fc21fc73ef9 [ 232.089387][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc21fe2bf8c [ 232.089397][ C0] RBP: 00007fc21fe2bf80 R08: 0000000000000010 R09: 0000000000000000 [ 232.089407][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc21fe2bf8c [ 232.089418][ C0] R13: 0000000000000000 R14: 00007ffdacf9e770 R15: 00007ffdacf9e858 [ 232.089435][ C0] [ 233.643939][ C0] WARNING: CPU: 0 PID: 5720 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 233.653212][ C0] Modules linked in: [ 233.657086][ C0] CPU: 0 PID: 5720 Comm: syz.1.498 Not tainted 5.15.167-syzkaller #0 [ 233.665136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.675168][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 233.681305][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 233.700993][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00010046 [ 233.707038][ C0] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff88807afc8000 [ 233.715159][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.723106][ C0] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: ffffed100f5f9001 [ 233.731053][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 233.738999][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 233.746946][ C0] FS: 00007fc21e0ec6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 233.755854][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.762414][ C0] CR2: 0000001b2e21fffc CR3: 0000000062417000 CR4: 00000000003506f0 [ 233.770363][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.778329][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.786277][ C0] Call Trace: [ 233.789538][ C0] [ 233.792360][ C0] ? __warn+0x15b/0x300 [ 233.796505][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 233.802030][ C0] ? report_bug+0x1b7/0x2e0 [ 233.806539][ C0] ? handle_bug+0x3d/0x70 [ 233.810847][ C0] ? exc_invalid_op+0x16/0x40 [ 233.815501][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 233.820514][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 233.825949][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 233.831469][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 233.836992][ C0] bpf_probe_read_compat+0xe4/0x180 [ 233.842167][ C0] bpf_prog_f4543f5253660125+0x3d/0x444 [ 233.847687][ C0] bpf_trace_run3+0x2ce/0x380 [ 233.852360][ C0] ? bpf_trace_run2+0x340/0x340 [ 233.857228][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 233.863136][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 233.868583][ C0] ? _raw_spin_lock+0x40/0x40 [ 233.873235][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 233.879208][ C0] enqueue_timer+0x3ae/0x540 [ 233.883800][ C0] __mod_timer+0xa60/0xeb0 [ 233.888197][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 233.894070][ C0] ? mod_timer_pending+0x20/0x20 [ 233.898985][ C0] ? prandom_u32+0x218/0x260 [ 233.903557][ C0] call_timer_fn+0x16d/0x560 [ 233.908142][ C0] ? garp_init_applicant+0x470/0x470 [ 233.913441][ C0] ? __run_timers+0x890/0x890 [ 233.918109][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 233.923288][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.928462][ C0] ? garp_init_applicant+0x470/0x470 [ 233.933752][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 233.938932][ C0] ? garp_init_applicant+0x470/0x470 [ 233.944194][ C0] __run_timers+0x67c/0x890 [ 233.948695][ C0] ? detach_timer+0x2f0/0x2f0 [ 233.953373][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 233.959421][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 233.964701][ C0] run_timer_softirq+0x63/0xf0 [ 233.969549][ C0] handle_softirqs+0x3a7/0x930 [ 233.974305][ C0] ? __irq_exit_rcu+0x157/0x240 [ 233.979133][ C0] ? do_softirq+0x240/0x240 [ 233.983614][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 233.988707][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 233.993887][ C0] __irq_exit_rcu+0x157/0x240 [ 233.998543][ C0] ? irq_exit_rcu+0x20/0x20 [ 234.003024][ C0] irq_exit_rcu+0x5/0x20 [ 234.007335][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 234.012947][ C0] [ 234.015852][ C0] [ 234.018757][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 234.024715][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 234.030413][ C0] Code: 45 31 c9 68 97 9b 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 d6 48 e4 08 e8 51 3f 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 234.049993][ C0] RSP: 0018:ffffc90002157578 EFLAGS: 00000282 [ 234.056039][ C0] RAX: 6a4f2ae853eb2500 RBX: ffff888078a15974 RCX: ffffffff96868f03 [ 234.063991][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 234.071940][ C0] RBP: ffffc900021575f0 R08: ffffffff8186db50 R09: ffffed1017207461 [ 234.079887][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 234.087856][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 234.095806][ C0] ? trace_hardirqs_on+0x30/0x80 [ 234.100728][ C0] finish_task_switch+0x134/0x630 [ 234.105732][ C0] ? __switch_to_asm+0x34/0x60 [ 234.110476][ C0] __schedule+0x12cc/0x45b0 [ 234.114961][ C0] ? update_curr+0x10c/0xa50 [ 234.119532][ C0] ? release_firmware_map_entry+0x190/0x190 [ 234.125496][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 234.131455][ C0] ? preempt_schedule+0xd9/0xe0 [ 234.136284][ C0] preempt_schedule_common+0x83/0xd0 [ 234.141546][ C0] preempt_schedule+0xd9/0xe0 [ 234.146198][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 234.151805][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 234.156979][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 234.162850][ C0] ? _raw_spin_unlock+0x40/0x40 [ 234.167677][ C0] preempt_schedule_thunk+0x16/0x18 [ 234.172854][ C0] ? trace_hardirqs_on+0x30/0x80 [ 234.177768][ C0] try_to_wake_up+0x8a8/0x1300 [ 234.182512][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 234.188730][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 234.193729][ C0] ? plist_check_list+0x20d/0x220 [ 234.198742][ C0] ? plist_del+0x3ed/0x410 [ 234.203148][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 234.208325][ C0] wake_up_q+0x8b/0xd0 [ 234.212376][ C0] futex_wake+0x607/0x750 [ 234.216691][ C0] ? futex_wait+0x740/0x740 [ 234.221180][ C0] ? kasan_set_track+0x62/0x80 [ 234.226050][ C0] ? slab_free_freelist_hook+0xdd/0x160 [ 234.231587][ C0] ? kmem_cache_free+0x91/0x1f0 [ 234.236422][ C0] ? do_mkdirat+0x48a/0x520 [ 234.240905][ C0] ? __x64_sys_mkdir+0x6a/0x80 [ 234.245658][ C0] ? do_syscall_64+0x3b/0xb0 [ 234.250235][ C0] do_futex+0x1394/0x1810 [ 234.254553][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 234.259557][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 234.264738][ C0] ? read_lock_is_recursive+0x10/0x10 [ 234.270083][ C0] ? __context_tracking_exit+0x4c/0x80 [ 234.275520][ C0] ? do_mkdirat+0x48a/0x520 [ 234.279996][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 234.284995][ C0] __se_sys_futex+0x407/0x490 [ 234.289662][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 234.294768][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 234.300733][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 234.305915][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 234.310663][ C0] do_syscall_64+0x3b/0xb0 [ 234.315061][ C0] ? clear_bhb_loop+0x15/0x70 [ 234.319718][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.325594][ C0] RIP: 0033:0x7fc21fc73ef9 [ 234.329992][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.349577][ C0] RSP: 002b:00007fc21e0ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.357971][ C0] RAX: ffffffffffffffda RBX: 00007fc21fe2bf88 RCX: 00007fc21fc73ef9 [ 234.365921][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc21fe2bf8c [ 234.374044][ C0] RBP: 00007fc21fe2bf80 R08: 0000000000000010 R09: 0000000000000000 [ 234.382011][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc21fe2bf8c [ 234.389990][ C0] R13: 0000000000000000 R14: 00007ffdacf9e770 R15: 00007ffdacf9e858 [ 234.397963][ C0] [ 234.401066][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.408405][ C0] CPU: 0 PID: 5720 Comm: syz.1.498 Not tainted 5.15.167-syzkaller #0 [ 234.416447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.426474][ C0] Call Trace: [ 234.429729][ C0] [ 234.432549][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 234.437214][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 234.442819][ C0] ? panic+0x860/0x860 [ 234.446867][ C0] ? copy_from_user_nofault+0xc0/0x1c0 [ 234.452302][ C0] ? copy_from_user_nofault+0xc0/0x1c0 [ 234.457737][ C0] panic+0x318/0x860 [ 234.461616][ C0] ? __warn+0x16a/0x300 [ 234.465753][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 234.470931][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 234.476457][ C0] __warn+0x2b2/0x300 [ 234.480429][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 234.485964][ C0] report_bug+0x1b7/0x2e0 [ 234.490289][ C0] handle_bug+0x3d/0x70 [ 234.494427][ C0] exc_invalid_op+0x16/0x40 [ 234.498916][ C0] asm_exc_invalid_op+0x16/0x20 [ 234.503752][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 234.509886][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 234.529473][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00010046 [ 234.535526][ C0] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff88807afc8000 [ 234.543479][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.551427][ C0] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: ffffed100f5f9001 [ 234.559374][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 234.567321][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 234.575289][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 234.580816][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 234.586822][ C0] bpf_probe_read_compat+0xe4/0x180 [ 234.591999][ C0] bpf_prog_f4543f5253660125+0x3d/0x444 [ 234.597519][ C0] bpf_trace_run3+0x2ce/0x380 [ 234.602174][ C0] ? bpf_trace_run2+0x340/0x340 [ 234.606999][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 234.612869][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 234.618302][ C0] ? _raw_spin_lock+0x40/0x40 [ 234.622959][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 234.628917][ C0] enqueue_timer+0x3ae/0x540 [ 234.633485][ C0] __mod_timer+0xa60/0xeb0 [ 234.637879][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 234.643843][ C0] ? mod_timer_pending+0x20/0x20 [ 234.648754][ C0] ? prandom_u32+0x218/0x260 [ 234.653351][ C0] call_timer_fn+0x16d/0x560 [ 234.657927][ C0] ? garp_init_applicant+0x470/0x470 [ 234.663188][ C0] ? __run_timers+0x890/0x890 [ 234.667842][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 234.673104][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 234.678282][ C0] ? garp_init_applicant+0x470/0x470 [ 234.683539][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 234.688715][ C0] ? garp_init_applicant+0x470/0x470 [ 234.693975][ C0] __run_timers+0x67c/0x890 [ 234.698456][ C0] ? detach_timer+0x2f0/0x2f0 [ 234.703107][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 234.709063][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 234.714324][ C0] run_timer_softirq+0x63/0xf0 [ 234.719066][ C0] handle_softirqs+0x3a7/0x930 [ 234.723807][ C0] ? __irq_exit_rcu+0x157/0x240 [ 234.728636][ C0] ? do_softirq+0x240/0x240 [ 234.733565][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 234.738671][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 234.743863][ C0] __irq_exit_rcu+0x157/0x240 [ 234.748522][ C0] ? irq_exit_rcu+0x20/0x20 [ 234.753006][ C0] irq_exit_rcu+0x5/0x20 [ 234.757221][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 234.762830][ C0] [ 234.765739][ C0] [ 234.768650][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 234.774609][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 234.780307][ C0] Code: 45 31 c9 68 97 9b 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 d6 48 e4 08 e8 51 3f 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 234.799886][ C0] RSP: 0018:ffffc90002157578 EFLAGS: 00000282 [ 234.805928][ C0] RAX: 6a4f2ae853eb2500 RBX: ffff888078a15974 RCX: ffffffff96868f03 [ 234.813876][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 234.821824][ C0] RBP: ffffc900021575f0 R08: ffffffff8186db50 R09: ffffed1017207461 [ 234.829773][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 234.837720][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 234.845675][ C0] ? trace_hardirqs_on+0x30/0x80 [ 234.850599][ C0] finish_task_switch+0x134/0x630 [ 234.855602][ C0] ? __switch_to_asm+0x34/0x60 [ 234.860344][ C0] __schedule+0x12cc/0x45b0 [ 234.864825][ C0] ? update_curr+0x10c/0xa50 [ 234.869397][ C0] ? release_firmware_map_entry+0x190/0x190 [ 234.875267][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 234.881225][ C0] ? preempt_schedule+0xd9/0xe0 [ 234.886053][ C0] preempt_schedule_common+0x83/0xd0 [ 234.891315][ C0] preempt_schedule+0xd9/0xe0 [ 234.895968][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 234.901577][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 234.906752][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 234.912621][ C0] ? _raw_spin_unlock+0x40/0x40 [ 234.917455][ C0] preempt_schedule_thunk+0x16/0x18 [ 234.922631][ C0] ? trace_hardirqs_on+0x30/0x80 [ 234.927546][ C0] try_to_wake_up+0x8a8/0x1300 [ 234.932290][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 234.938506][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 234.943507][ C0] ? plist_check_list+0x20d/0x220 [ 234.948509][ C0] ? plist_del+0x3ed/0x410 [ 234.952903][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 234.958078][ C0] wake_up_q+0x8b/0xd0 [ 234.962123][ C0] futex_wake+0x607/0x750 [ 234.966435][ C0] ? futex_wait+0x740/0x740 [ 234.971006][ C0] ? kasan_set_track+0x62/0x80 [ 234.975745][ C0] ? slab_free_freelist_hook+0xdd/0x160 [ 234.981269][ C0] ? kmem_cache_free+0x91/0x1f0 [ 234.986093][ C0] ? do_mkdirat+0x48a/0x520 [ 234.990571][ C0] ? __x64_sys_mkdir+0x6a/0x80 [ 234.995314][ C0] ? do_syscall_64+0x3b/0xb0 [ 234.999883][ C0] do_futex+0x1394/0x1810 [ 235.004190][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 235.009195][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 235.014459][ C0] ? read_lock_is_recursive+0x10/0x10 [ 235.019814][ C0] ? __context_tracking_exit+0x4c/0x80 [ 235.025251][ C0] ? do_mkdirat+0x48a/0x520 [ 235.029728][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 235.034729][ C0] __se_sys_futex+0x407/0x490 [ 235.039392][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 235.044134][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 235.050089][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 235.055264][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 235.060006][ C0] do_syscall_64+0x3b/0xb0 [ 235.064398][ C0] ? clear_bhb_loop+0x15/0x70 [ 235.069052][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.075010][ C0] RIP: 0033:0x7fc21fc73ef9 [ 235.079408][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.099429][ C0] RSP: 002b:00007fc21e0ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.107821][ C0] RAX: ffffffffffffffda RBX: 00007fc21fe2bf88 RCX: 00007fc21fc73ef9 [ 235.115775][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc21fe2bf8c [ 235.123724][ C0] RBP: 00007fc21fe2bf80 R08: 0000000000000010 R09: 0000000000000000 [ 235.131673][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc21fe2bf8c [ 235.139621][ C0] R13: 0000000000000000 R14: 00007ffdacf9e770 R15: 00007ffdacf9e858 [ 235.147575][ C0] [ 235.150664][ C0] Kernel Offset: disabled [ 235.154971][ C0] Rebooting in 86400 seconds..