last executing test programs: 24.071379922s ago: executing program 1 (id=707): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) 23.077284631s ago: executing program 1 (id=709): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r5, 0xcc6f}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(r1, 0x3, &(0x7f0000000180)={0x108, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r7, 0x0, 0x0) 20.716996027s ago: executing program 1 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getrlimit(0x9, &(0x7f0000000080)) r3 = fanotify_init(0x40, 0x80000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000015c0)={[{@acl}, {@commit={'commit', 0x3d, 0x7f}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x1}}, {@dir_resv_level}, {@data_writeback}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") 13.140346544s ago: executing program 4 (id=728): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2, 0x0, 0xb03}, 0x2b, [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86, 0x0, 0x0, 0x0, 0x800]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.015307796s ago: executing program 4 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20002000}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 11.612555634s ago: executing program 4 (id=732): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffff2, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x10000000, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = io_uring_setup(0x4d3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000080)=[{r3, 0x1086}], 0x1, 0x20000080) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2b, 0xff, 0x87, 0xffffffff, 0x26, @private0, @private0, 0x7, 0x80, 0x3, 0x3}}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)='c*', 0x2}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000500), 0x66) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) 11.31125455s ago: executing program 1 (id=733): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) 10.416733247s ago: executing program 0 (id=734): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) r1 = creat(0x0, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = dup(0xffffffffffffffff) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=r4], 0xfffffeb7) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000400)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/81) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$nl_route(r9, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000680010002abd7000ffdbdf250a0000000800000008000100010080000800010000000000060007000a00000008000100010000000100088008000300ac1414aa0800010002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) msgctl$IPC_RMID(r0, 0x0) 10.399846987s ago: executing program 2 (id=735): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="0031e500000044"], &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, 0x0}) 10.28109292s ago: executing program 1 (id=736): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0x0, 0x0, 0x0) 10.135473632s ago: executing program 0 (id=737): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0xffff, 0x5107, 0x4}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.050911844s ago: executing program 4 (id=738): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r5, 0xcc6f}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(r1, 0x3, &(0x7f0000000180)={0x108, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r7, 0x0, 0x0) 8.906353797s ago: executing program 0 (id=740): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2, 0x0, 0xb03}, 0x2b, [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86, 0x0, 0x0, 0x0, 0x800]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.773752679s ago: executing program 4 (id=741): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8001, 0x101021) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/91) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) r2 = syz_clone3(0x0, 0x0) tgkill(r2, r2, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000002880), 0x101, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000380)={0x17c0000, 0x8, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909d7, 0x6, '\x00', @value64=0x3}}) 7.962683335s ago: executing program 0 (id=743): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 6.845454296s ago: executing program 4 (id=744): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) 6.335492737s ago: executing program 1 (id=745): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) r1 = creat(0x0, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = dup(0xffffffffffffffff) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=r4], 0xfffffeb7) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) msgctl$IPC_RMID(r0, 0x0) 6.243520078s ago: executing program 0 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getrlimit(0x9, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 5.710346669s ago: executing program 2 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) shutdown(r0, 0x1) 5.710062679s ago: executing program 3 (id=749): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 5.554386042s ago: executing program 2 (id=750): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0xffff, 0x5107, 0x4}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.907610355s ago: executing program 3 (id=751): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r5, 0xcc6f}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(r1, 0x3, &(0x7f0000000180)={0x108, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r7, 0x0, 0x0) 4.450167613s ago: executing program 2 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000462000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) 3.532493661s ago: executing program 3 (id=753): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) 3.240126207s ago: executing program 2 (id=754): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x6c, 0xff, 0x4, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0xff, 0x1, 0x0, 0x93}, 0xe) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) write(r0, &(0x7f0000001180), 0x0) shutdown(r4, 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={r6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x14000000}}, [0xfff, 0x5, 0x200, 0x50820bc5, 0x5, 0x2, 0x2, 0x23, 0x268130c7, 0x8, 0x3, 0x3, 0xe5, 0xb, 0x6]}, &(0x7f0000000040)=0x100) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x29943, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r8, 0x400454cc, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) close_range(r7, 0xffffffffffffffff, 0x0) 3.159440498s ago: executing program 3 (id=755): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r7, 0x3, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, 0x0, 0x0) 1.171129187s ago: executing program 3 (id=756): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 1.03410789s ago: executing program 2 (id=757): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) r2 = gettid() getpgid(r2) syz_open_procfs(r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0x8, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 375.785272ms ago: executing program 0 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20002000}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) 0s ago: executing program 3 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xe}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x20000050) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x19}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x240488d4}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002240), 0x80040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) openat(0xffffffffffffff9c, 0x0, 0x0, 0x72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 55.961402][ T4253] cgroup: Unknown subsys name 'net' [ 56.089776][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.314388][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.193874][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.202526][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.205938][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.212212][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.219087][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.224972][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.231561][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.239158][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.253993][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.254183][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.261481][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.268753][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.276592][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.282980][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.296687][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.298829][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.305966][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.311668][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.325986][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.333233][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.340625][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.347279][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.347915][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.355191][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.373365][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.377163][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.381456][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.394697][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.402221][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.429124][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.823790][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 59.860654][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 59.894775][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 59.965923][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 60.030389][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 60.074741][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.082364][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.090628][ T4264] device bridge_slave_0 entered promiscuous mode [ 60.103702][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.110804][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.119092][ T4276] device bridge_slave_0 entered promiscuous mode [ 60.130795][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.138133][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.145918][ T4276] device bridge_slave_1 entered promiscuous mode [ 60.153544][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.160662][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.168528][ T4269] device bridge_slave_0 entered promiscuous mode [ 60.176876][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.184129][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.192223][ T4269] device bridge_slave_1 entered promiscuous mode [ 60.199250][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.206477][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.214789][ T4264] device bridge_slave_1 entered promiscuous mode [ 60.298681][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.309773][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.321717][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.330980][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.338184][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.346330][ T4267] device bridge_slave_0 entered promiscuous mode [ 60.357479][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.364637][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.372678][ T4267] device bridge_slave_1 entered promiscuous mode [ 60.381649][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.392469][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.402800][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.484238][ T4264] team0: Port device team_slave_0 added [ 60.491753][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.501068][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.508639][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.516618][ T4263] device bridge_slave_0 entered promiscuous mode [ 60.526179][ T4276] team0: Port device team_slave_0 added [ 60.532221][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.539470][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.547730][ T4263] device bridge_slave_1 entered promiscuous mode [ 60.556869][ T4269] team0: Port device team_slave_0 added [ 60.574273][ T4264] team0: Port device team_slave_1 added [ 60.591008][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.602220][ T4276] team0: Port device team_slave_1 added [ 60.615545][ T4269] team0: Port device team_slave_1 added [ 60.628663][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.641558][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.671782][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.678992][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.704961][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.745499][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.752477][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.778701][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.798762][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.805974][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.831996][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.845008][ T4267] team0: Port device team_slave_0 added [ 60.851237][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.858281][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.884274][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.896142][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.903106][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.930040][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.953897][ T4263] team0: Port device team_slave_0 added [ 60.961379][ T4267] team0: Port device team_slave_1 added [ 60.972270][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.979380][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.005454][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.028204][ T4263] team0: Port device team_slave_1 added [ 61.068031][ T4264] device hsr_slave_0 entered promiscuous mode [ 61.074824][ T4264] device hsr_slave_1 entered promiscuous mode [ 61.092238][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.099275][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.125565][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.146176][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.153230][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.179195][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.199214][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.206403][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.232455][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.248743][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.256061][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.282136][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.304192][ T4276] device hsr_slave_0 entered promiscuous mode [ 61.311093][ T4276] device hsr_slave_1 entered promiscuous mode [ 61.317879][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.326260][ T4276] Cannot create hsr debugfs directory [ 61.370375][ T4269] device hsr_slave_0 entered promiscuous mode [ 61.378681][ T4269] device hsr_slave_1 entered promiscuous mode [ 61.385272][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 61.391785][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.399475][ T4269] Cannot create hsr debugfs directory [ 61.462527][ T4263] device hsr_slave_0 entered promiscuous mode [ 61.469230][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 61.470005][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 61.476279][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 61.482126][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 61.496306][ T4263] device hsr_slave_1 entered promiscuous mode [ 61.502828][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.510792][ T4263] Cannot create hsr debugfs directory [ 61.526652][ T4267] device hsr_slave_0 entered promiscuous mode [ 61.533772][ T4267] device hsr_slave_1 entered promiscuous mode [ 61.540254][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.548236][ T4267] Cannot create hsr debugfs directory [ 61.819707][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.831768][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.841268][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.852449][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.904378][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.926394][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.936616][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.948003][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.010584][ T4267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.019576][ T4267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.047691][ T4267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.057423][ T4267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.150007][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.161948][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.180045][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.196815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.206476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.225207][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.232373][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.258656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.267674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.277367][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.284709][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.294956][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.311454][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.324089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.345787][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.363469][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.384976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.393928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.402292][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.409419][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.418326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.428010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.437778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.445942][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.455093][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.468720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.507271][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.519082][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.547231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.557888][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.568511][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.578927][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.588980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.597390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.606728][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.616092][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.623287][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.642799][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.656479][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.680261][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.689318][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.698378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.710953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.721541][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.736081][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.748283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.758784][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.772394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.782649][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.789781][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.798809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.812678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.840243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.856499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.871016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.882683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.898468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.912512][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.941918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.952911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.970466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.987985][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.997583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.006918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.016407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.025223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.034313][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.041433][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.050594][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.089934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.100546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.111857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.121708][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.128877][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.139215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.154276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.190746][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.198619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.209965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.221511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.230444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.239151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.247700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.256440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.265313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.279479][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.291248][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.308672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.318335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.328008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.337711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.346082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.359574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.368309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.402132][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.415941][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.428317][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.440668][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.447851][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.457893][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.466130][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 63.473038][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.482291][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.489461][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.497955][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.510027][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.543429][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.551464][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.559690][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 63.559704][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 63.565726][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 63.565754][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 63.588512][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.597915][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.608227][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.617007][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.627200][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.634392][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.642356][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.651852][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.660469][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.667592][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.676392][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.685601][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.693789][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.702941][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.712593][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.736803][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.749979][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.774912][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.804593][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.815132][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.825426][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.834821][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.848762][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.859336][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.874843][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.888234][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.898777][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.908441][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.918035][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.927313][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.945165][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.964079][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.990663][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.999609][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.008515][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.017626][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.031704][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.041462][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.069364][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.079776][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.089683][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.104848][ T4264] device veth0_vlan entered promiscuous mode [ 64.117260][ T4276] device veth0_vlan entered promiscuous mode [ 64.136735][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.154264][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.162347][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.178883][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.202320][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.212502][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.225600][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.246082][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.258507][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.273105][ T4264] device veth1_vlan entered promiscuous mode [ 64.342100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.354015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.362079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.370956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.380455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.389333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.399259][ T4276] device veth1_vlan entered promiscuous mode [ 64.413776][ T4264] device veth0_macvtap entered promiscuous mode [ 64.435139][ T4264] device veth1_macvtap entered promiscuous mode [ 64.481668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.491767][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.500584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.510041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.521796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.537964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.558921][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.572735][ T4267] device veth0_vlan entered promiscuous mode [ 64.591193][ T4276] device veth0_macvtap entered promiscuous mode [ 64.612889][ T4276] device veth1_macvtap entered promiscuous mode [ 64.626650][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.646048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.662582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.672704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.684027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.692651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.701574][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.716235][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.735527][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.744643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.755020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.765767][ T4267] device veth1_vlan entered promiscuous mode [ 64.777519][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.786740][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.794499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.802985][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.812377][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.821430][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.831547][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.871528][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.880081][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.889458][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.901515][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.930024][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.943643][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955125][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.968125][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.000344][ T4267] device veth0_macvtap entered promiscuous mode [ 65.023884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.038703][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.047995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.057715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.068337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.080189][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.091770][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.103359][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.131091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.142798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.159524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.168915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.183665][ T4267] device veth1_macvtap entered promiscuous mode [ 65.194978][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210443][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.219564][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.236040][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.269796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.278900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.316009][ T4269] device veth0_vlan entered promiscuous mode [ 65.334100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.342223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.359288][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.371404][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.381954][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.398333][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.410085][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.446768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.460297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.480125][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.491331][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.501585][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.512526][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.524288][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.534456][ T4269] device veth1_vlan entered promiscuous mode [ 65.543865][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 65.552458][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.562469][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.567107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.585940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.595012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.603980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.615232][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623567][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 65.629973][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 65.629997][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636347][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 65.651207][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 65.652298][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.666523][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716199][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.724673][ T4269] device veth0_macvtap entered promiscuous mode [ 65.735788][ T4269] device veth1_macvtap entered promiscuous mode [ 65.742854][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.756107][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.766683][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.776989][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.786761][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.796851][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.805146][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.814042][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.822693][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.861468][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.879754][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.921439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.930084][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.941175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.941247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.955889][ T4263] device veth0_vlan entered promiscuous mode [ 65.967353][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.982369][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.993660][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.004494][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.014441][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.026638][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.038874][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.060318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.070897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.081225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.089619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.098283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.128921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.145375][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.157283][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.167691][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.185311][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.200559][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.219865][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.232689][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.327371][ T4263] device veth1_vlan entered promiscuous mode [ 66.337240][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.346865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.358189][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.367414][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.376808][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.387836][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.969795][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.000471][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.094204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.115686][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.131677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.163430][ T4263] device veth0_macvtap entered promiscuous mode [ 67.240377][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.268046][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.283789][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.311012][ T4263] device veth1_macvtap entered promiscuous mode [ 67.340560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.351078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.359349][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.367845][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.368343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.389835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.399666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.519943][ T4394] loop3: detected capacity change from 0 to 512 [ 67.673683][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 67.704546][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 67.711895][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 67.720965][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 67.800959][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.810197][ T4394] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.864583][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 67.872500][ T4400] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 67.886939][ T4392] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 67.903409][ T26] audit: type=1804 audit(1757170839.711:2): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6" name="/newroot/1/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 67.979237][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.994980][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.005022][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.015582][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.026566][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.068152][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117199][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.148936][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.165827][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.177385][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.188825][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.198711][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.209259][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.215023][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 68.219255][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.249726][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.260257][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.271176][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.282964][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.313326][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.328943][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.373730][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.392217][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.419734][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.442485][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.454204][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.842635][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.530394][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.535418][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.541438][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.573378][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.592883][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.392530][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.480842][ T4421] syz.2.3 (4421): drop_caches: 2 [ 70.813242][ T4430] loop1: detected capacity change from 0 to 1024 [ 70.820472][ T4430] ======================================================= [ 70.820472][ T4430] WARNING: The mand mount option has been deprecated and [ 70.820472][ T4430] and is ignored by this kernel. Remove the mand [ 70.820472][ T4430] option from the mount to silence this warning. [ 70.820472][ T4430] ======================================================= [ 71.067025][ T4430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.310541][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.320454][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.148282][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 72.592405][ T4452] loop3: detected capacity change from 0 to 512 [ 73.395802][ T4452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.405755][ T4452] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.594326][ T4452] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.610062][ T26] audit: type=1804 audit(1757170845.421:3): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.15" name="/newroot/5/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 73.838518][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 76.461476][ T22] cfg80211: failed to load regulatory.db [ 77.350634][ T4501] Error parsing options; rc = [-22] [ 77.375042][ T4501] loop2: detected capacity change from 0 to 64 [ 77.704362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.378824][ T4509] loop3: detected capacity change from 0 to 512 [ 79.147555][ T4501] hfs: get root inode failed [ 79.199509][ T4509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.208635][ T4509] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.233120][ T26] audit: type=1804 audit(1757170851.051:4): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.30" name="/newroot/9/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 79.298473][ T4482] syz.4.24 (4482): drop_caches: 2 [ 79.310279][ T4508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 79.510123][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 81.796299][ T4543] loop4: detected capacity change from 0 to 1024 [ 81.998468][ T4543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.062078][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 83.133169][ C0] sched: RT throttling activated [ 84.665794][ T4565] Error parsing options; rc = [-22] [ 84.688033][ T4565] loop4: detected capacity change from 0 to 64 [ 85.166573][ T4565] hfs: get root inode failed [ 85.577572][ T4255] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.706551][ T4576] loop1: detected capacity change from 0 to 512 [ 87.340605][ T4570] syz.3.46 (4570): drop_caches: 2 [ 87.461902][ T4576] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.470983][ T4576] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.027938][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 89.570128][ T4621] tmpfs: Unknown parameter 'quota' [ 90.240399][ T4610] loop2: detected capacity change from 0 to 256 [ 91.352683][ T4638] loop2: detected capacity change from 0 to 128 [ 91.442948][ T4638] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 91.540461][ T4638] hpfs: filesystem error: improperly stopped [ 91.742450][ T4644] loop0: detected capacity change from 0 to 512 [ 91.788223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.983375][ T4638] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.020757][ T4638] hpfs: You really don't want any checks? You are crazy... [ 92.045578][ T4644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.055087][ T4644] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.092923][ T4638] hpfs: hpfs_map_sector(): read error [ 92.098036][ T4651] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 92.099521][ T4638] hpfs: code page support is disabled [ 92.115596][ T4643] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 92.131313][ T26] audit: type=1804 audit(1757170863.941:5): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.65" name="/newroot/16/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 92.154654][ T4638] hpfs: hpfs_map_4sectors(): unaligned read [ 92.161545][ T4638] hpfs: hpfs_map_4sectors(): unaligned read [ 92.182349][ T4638] hpfs: filesystem error: unable to find root dir [ 92.198880][ T4628] loop3: detected capacity change from 0 to 32768 [ 92.370401][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 94.345290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.353777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.389365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 94.944594][ T4688] loop4: detected capacity change from 0 to 512 [ 95.642681][ T4688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.651776][ T4688] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.707557][ T4694] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 95.718695][ T26] audit: type=1804 audit(1757170867.541:6): pid=4687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.79" name="/newroot/13/file1/file0/file0" dev="loop4" ino=13 res=1 errno=0 [ 95.718943][ T4687] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.966524][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 95.982431][ T4684] loop3: detected capacity change from 0 to 32768 [ 96.051300][ T4684] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.189491][ T4684] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.664005][ T4684] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 96.719176][ T4324] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.730041][ T4324] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.106198][ T4324] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 376ms [ 97.140924][ T4324] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.158346][ T4684] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.198249][ T4703] syz.4.82 (4703): drop_caches: 2 [ 97.400217][ T4718] loop0: detected capacity change from 0 to 2048 [ 98.460295][ T4731] process 'syz.0.87' launched './file0' with NULL argv: empty string added [ 99.334851][ T4737] loop0: detected capacity change from 0 to 32768 [ 99.349781][ T4737] (syz.0.92,4737,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 99.360678][ T4737] (syz.0.92,4737,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 99.435217][ T4255] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.213279][ T4412] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.517055][ T4412] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.536967][ T4412] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 100.852226][ T4412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.136669][ T4412] usb 4-1: string descriptor 0 read error: -71 [ 101.984665][ T4412] usb 4-1: USB disconnect, device number 2 [ 102.034627][ T4768] 9pnet_fd: Insufficient options for proto=fd [ 102.077507][ T4772] loop3: detected capacity change from 0 to 128 [ 102.131755][ T4773] loop4: detected capacity change from 0 to 2048 [ 102.306019][ T4255] udevd[4255]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.323696][ T4772] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.352020][ T4772] hpfs: filesystem error: improperly stopped [ 102.431560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.727924][ T4772] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.743456][ T4772] hpfs: You really don't want any checks? You are crazy... [ 103.070496][ T4786] loop1: detected capacity change from 0 to 512 [ 103.368219][ T4772] hpfs: hpfs_map_sector(): read error [ 105.153296][ T4772] hpfs: code page support is disabled [ 105.160663][ T4772] hpfs: hpfs_map_4sectors(): unaligned read [ 105.473713][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.482741][ T4786] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.595052][ T4772] hpfs: hpfs_map_4sectors(): unaligned read [ 105.620058][ T26] audit: type=1804 audit(1757170877.441:7): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.115" name="/newroot/20/file1/file0/file0" dev="loop1" ino=13 res=1 errno=0 [ 105.935458][ T4772] hpfs: filesystem error: unable to find root dir [ 105.941212][ T4784] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 106.264122][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 109.555429][ T4835] loop2: detected capacity change from 0 to 2048 [ 110.299125][ T4820] loop1: detected capacity change from 0 to 32768 [ 110.777738][ T4851] loop1: detected capacity change from 0 to 128 [ 111.308819][ T4851] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.350153][ T4853] loop3: detected capacity change from 0 to 512 [ 111.436775][ T4851] hpfs: filesystem error: improperly stopped [ 111.455302][ T4856] loop4: detected capacity change from 0 to 512 [ 111.473474][ T4851] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.515192][ T4851] hpfs: You really don't want any checks? You are crazy... [ 111.523888][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.532889][ T4853] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.565274][ T4852] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.679997][ T26] audit: type=1804 audit(1757170883.381:8): pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.120" name="/newroot/23/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 111.744094][ T4851] hpfs: hpfs_map_sector(): read error [ 111.749610][ T4851] hpfs: code page support is disabled [ 111.820403][ T4862] tipc: Started in network mode [ 111.825609][ T4862] tipc: Node identity 4, cluster identity 4711 [ 111.831846][ T4862] tipc: Node number set to 4 [ 112.074500][ T4851] hpfs: hpfs_map_4sectors(): unaligned read [ 112.226203][ T4851] hpfs: hpfs_map_4sectors(): unaligned read [ 112.321591][ T4851] hpfs: filesystem error: unable to find root dir [ 112.407877][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 112.413923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.424845][ T4865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.123'. [ 114.823592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.107862][ T4898] loop1: detected capacity change from 0 to 256 [ 115.291904][ T4898] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 115.405311][ T4898] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 116.022297][ T4908] loop4: detected capacity change from 0 to 1024 [ 116.042645][ T4914] Error parsing options; rc = [-22] [ 116.127395][ T4914] loop0: detected capacity change from 0 to 64 [ 116.193814][ T4901] loop2: detected capacity change from 0 to 32768 [ 116.223594][ T4908] hfsplus: bad catalog entry type [ 116.246401][ T4914] hfs: get root inode failed [ 116.427987][ T4918] Bluetooth: MGMT ver 1.22 [ 116.858467][ T9] hfsplus: b-tree write err: -5, ino 4 [ 117.000838][ T4925] loop4: detected capacity change from 0 to 512 [ 118.183466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.192001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.200333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.208634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.216952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.225247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.248067][ T4938] fuse: Bad value for 'fd' [ 119.290148][ T4946] loop1: detected capacity change from 0 to 1024 [ 119.522857][ T4946] hfsplus: bad catalog entry type [ 119.889408][ T33] hfsplus: b-tree write err: -5, ino 4 [ 120.958720][ T4957] loop0: detected capacity change from 0 to 32768 [ 120.966243][ T4957] (syz.0.144,4957,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 120.975841][ T4957] (syz.0.144,4957,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 121.099447][ T4934] loop3: detected capacity change from 0 to 32768 [ 121.107634][ T4799] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.457013][ T4965] loop2: detected capacity change from 0 to 512 [ 121.674549][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.683679][ T4965] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.717290][ T4965] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 122.474749][ T26] audit: type=1804 audit(1757170893.541:9): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.146" name="/newroot/27/file1/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 122.503652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.503811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.581579][ T4977] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 122.623961][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 123.613642][ T4992] Zero length message leads to an empty skb [ 123.704126][ T4966] loop0: detected capacity change from 0 to 32768 [ 126.343902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.378795][ T5000] loop3: detected capacity change from 0 to 40427 [ 126.413299][ T5000] F2FS-fs (loop3): Invalid log blocks per segment (327689) [ 126.431239][ T5000] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.532591][ T5028] Error parsing options; rc = [-22] [ 126.565769][ T5000] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 127.294367][ T5028] loop0: detected capacity change from 0 to 64 [ 127.451560][ T5028] hfs: get root inode failed [ 127.623831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.796403][ T5039] loop4: detected capacity change from 0 to 512 [ 127.815497][ T5042] tipc: Started in network mode [ 127.820474][ T5042] tipc: Node identity 4, cluster identity 4711 [ 127.826732][ T5042] tipc: Node number set to 4 [ 128.267318][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.276920][ T5039] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.335735][ T5039] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 128.348231][ T26] audit: type=1804 audit(1757170900.161:10): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.161" name="/newroot/36/file1/file0/file0" dev="loop4" ino=13 res=1 errno=0 [ 128.630736][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 129.638959][ T5056] fuse: Bad value for 'fd' [ 129.851849][ T5061] tmpfs: Unknown parameter 'quota' [ 130.194107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.959473][ T5075] loop4: detected capacity change from 0 to 128 [ 131.306438][ T5075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.541443][ T5075] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.009967][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 132.753655][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760060][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.702977][ T5100] tipc: Started in network mode [ 133.708142][ T5100] tipc: Node identity 4, cluster identity 4711 [ 133.714413][ T5100] tipc: Node number set to 4 [ 134.542889][ T5104] loop0: detected capacity change from 0 to 1024 [ 134.772356][ T5107] tmpfs: Unknown parameter 'quota' [ 134.859795][ T5104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.856116][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 137.304168][ T5134] comedi comedi3: board detection failed [ 140.368430][ T5160] tipc: Started in network mode [ 140.373474][ T5160] tipc: Node identity 4, cluster identity 4711 [ 140.379686][ T5160] tipc: Node number set to 4 [ 140.587717][ T5162] syz.2.188 sent an empty control message without MSG_MORE. [ 141.210084][ T5152] loop0: detected capacity change from 0 to 32768 [ 141.250111][ T5152] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.185 (5152) [ 142.094405][ T5152] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 142.149382][ T5152] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 142.212976][ T5152] BTRFS info (device loop0): using free space tree [ 142.721971][ T5152] BTRFS error (device loop0): open_ctree failed: -12 [ 144.902233][ T5189] loop2: detected capacity change from 0 to 32768 [ 145.222336][ T5189] (syz.2.192,5189,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 145.455272][ T5189] (syz.2.192,5189,1):ocfs2_read_virt_blocks:1013 ERROR: status = -12 [ 145.626863][ T5189] (syz.2.192,5189,0):ocfs2_read_dir_block:511 ERROR: status = -12 [ 145.635952][ T5189] (syz.2.192,5189,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 145.677210][ T5189] (syz.2.192,5189,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 145.677246][ T5189] (syz.2.192,5189,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 145.733293][ T5217] syz.4.199 uses obsolete (PF_INET,SOCK_PACKET) [ 145.755927][ T5189] (syz.2.192,5189,0):ocfs2_initialize_super:2255 ERROR: status = -22 [ 145.776232][ T5189] (syz.2.192,5189,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 147.959110][ T5233] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.005493][ T5236] loop4: detected capacity change from 0 to 1024 [ 148.108234][ T5236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce118, mo2=0000] [ 148.199786][ T5236] System zones: 0-1, 3-12 [ 148.255880][ T5236] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 148.299371][ T5247] loop1: detected capacity change from 0 to 1024 [ 148.336232][ T5236] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.206: couldn't read orphan inode 11 (err -117) [ 148.377005][ T5236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.465261][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.487256][ T5244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 148.558262][ T4412] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.879538][ T4412] usb 4-1: config 8 has an invalid interface number: 91 but max is 0 [ 148.913721][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 148.937662][ T4412] usb 4-1: config 8 has no interface number 0 [ 149.084082][ T4412] usb 4-1: config 8 interface 91 has no altsetting 0 [ 149.184441][ T4412] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0381, bcdDevice= f.bc [ 149.211246][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 149.224267][ T4412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.264080][ T4412] usb 4-1: Product: syz [ 149.268343][ T4412] usb 4-1: Manufacturer: syz [ 149.291449][ T4412] usb 4-1: SerialNumber: syz [ 149.484447][ T5256] loop0: detected capacity change from 0 to 32768 [ 149.528445][ T5256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.212 (5256) [ 149.587050][ T5256] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.597525][ T5256] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.606456][ T5256] BTRFS info (device loop0): using free space tree [ 149.640485][ T4412] usb 4-1: USB disconnect, device number 3 [ 150.383423][ T5256] BTRFS info (device loop0): enabling ssd optimizations [ 150.457484][ T5256] netlink: 84 bytes leftover after parsing attributes in process `syz.0.212'. [ 150.636793][ T5291] fuse: Bad value for 'fd' [ 152.075892][ T4276] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.087660][ T4412] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.111585][ T5270] loop1: detected capacity change from 0 to 32768 [ 152.293299][ T4412] usb 4-1: Using ep0 maxpacket: 8 [ 152.300408][ T4412] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.349623][ T4412] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.386100][ T4412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.412754][ T4412] usb 4-1: config 0 descriptor?? [ 152.492368][ T4412] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 153.415054][ T4412] gspca_vc032x: reg_w err -110 [ 153.419926][ T4412] vc032x: probe of 4-1:0.0 failed with error -110 [ 153.474595][ T5323] loop2: detected capacity change from 0 to 1024 [ 153.552052][ T5323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.803951][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 155.227870][ T4412] usb 4-1: USB disconnect, device number 4 [ 156.122282][ T5354] fuse: Bad value for 'fd' [ 156.951079][ T5359] loop0: detected capacity change from 0 to 32768 [ 156.958677][ T5359] (syz.0.233,5359,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 156.968278][ T5359] (syz.0.233,5359,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 157.095211][ T4799] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.946381][ T26] audit: type=1800 audit(1757170929.281:11): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 158.212176][ T5370] loop3: detected capacity change from 0 to 256 [ 158.366827][ T5370] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 158.639319][ T5378] loop4: detected capacity change from 0 to 256 [ 158.678812][ T5378] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 158.704331][ T5375] exFAT-fs (loop3): hint_cluster is invalid (17) [ 158.788336][ T5378] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 160.367536][ T5390] loop1: detected capacity change from 0 to 512 [ 161.329222][ T5390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.338413][ T5390] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.368389][ T5390] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 161.383538][ T26] audit: type=1804 audit(1757170933.191:12): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.242" name="/newroot/44/file1/file0/file0" dev="loop1" ino=13 res=1 errno=0 [ 161.408437][ T5401] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 161.821379][ T5407] fuse: Bad value for 'fd' [ 162.989920][ T5416] loop0: detected capacity change from 0 to 16 [ 163.103928][ T5416] erofs: (device loop0): mounted with root inode @ nid 36. [ 163.387260][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 163.590506][ T5420] loop3: detected capacity change from 0 to 1024 [ 163.774542][ T5420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 164.087872][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 164.498788][ T5432] loop1: detected capacity change from 0 to 256 [ 164.535308][ T5432] exfat: Deprecated parameter 'namecase' [ 165.343728][ T5432] exfat: Deprecated parameter 'namecase' [ 165.386023][ T5432] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 166.378245][ T5447] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 166.386182][ T5447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'. [ 166.397609][ T5447] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 168.712515][ T5462] Error parsing options; rc = [-22] [ 168.724520][ T5462] loop4: detected capacity change from 0 to 64 [ 168.745502][ T5462] hfs: get root inode failed [ 169.132243][ T4412] libceph: connect (1)[c::]:6789 error -101 [ 169.147297][ T4412] libceph: mon0 (1)[c::]:6789 connect error [ 169.476677][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 169.483842][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 169.862203][ T5475] loop0: detected capacity change from 0 to 1024 [ 169.923778][ T5461] ceph: No mds server is up or the cluster is laggy [ 170.005098][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 170.011258][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 173.287672][ T5506] loop0: detected capacity change from 0 to 512 [ 173.360367][ T5506] EXT4-fs: Ignoring removed bh option [ 173.693132][ T5510] loop1: detected capacity change from 0 to 1024 [ 173.723988][ T5508] loop3: detected capacity change from 0 to 512 [ 173.764768][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.773869][ T5508] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.791958][ T26] audit: type=1804 audit(1757170945.611:13): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.273" name="/newroot/52/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 173.813635][ T5508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 173.996019][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 174.075181][ T5510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.142628][ T5522] Error parsing options; rc = [-22] [ 174.152299][ T5522] loop2: detected capacity change from 0 to 64 [ 174.187429][ T5522] hfs: get root inode failed [ 174.376515][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 174.483279][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.498153][ T5308] libceph: connect (1)[c::]:6789 error -101 [ 174.512723][ T5308] libceph: mon0 (1)[c::]:6789 connect error [ 174.687292][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 174.694703][ T7] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.740953][ T7] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.788991][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.813342][ T7] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 174.856174][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.925040][ T7] usb 4-1: config 0 descriptor?? [ 174.933612][ T5310] libceph: connect (1)[c::]:6789 error -101 [ 174.940460][ T5310] libceph: mon0 (1)[c::]:6789 connect error [ 175.158342][ T5540] loop4: detected capacity change from 0 to 512 [ 175.187957][ T5540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.197774][ T5540] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.230576][ T5540] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.282: bg 0: block 217: padding at end of block bitmap is not set [ 175.278296][ T5528] ceph: No mds server is up or the cluster is laggy [ 175.342144][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 175.382436][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.450958][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.494749][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.668152][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.009727][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.017780][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.025131][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.033500][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.040491][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.053259][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.060266][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.237642][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.284536][ T5557] loop4: detected capacity change from 0 to 512 [ 177.386977][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.394887][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.402011][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.409397][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 177.416784][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.030302][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.041111][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.050159][ T5557] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.066626][ T26] audit: type=1804 audit(1757170949.891:14): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.288" name="/newroot/66/file1/file0/file0" dev="loop4" ino=13 res=1 errno=0 [ 178.088464][ T5557] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 178.183464][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.209709][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.228387][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.443489][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.450546][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.466412][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.477575][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.484997][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.492196][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.499758][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.507454][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.519871][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.533056][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.540650][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.548075][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.555590][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.562648][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.590106][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.605120][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.619130][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.632176][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.688266][ T5577] fuse: Bad value for 'fd' [ 178.708951][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.815263][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 178.925137][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.039486][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.140082][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.239819][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.338711][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.455381][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.482860][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.522271][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.576285][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.594365][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.611664][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.627188][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.643362][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.650529][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.657762][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.673312][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.683277][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.693280][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.700309][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.717587][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.724656][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.741912][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x1 [ 179.769442][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.815737][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.855375][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.904760][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x1 [ 179.911778][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.931727][ T5579] loop2: detected capacity change from 0 to 32768 [ 179.939480][ T5579] (syz.2.291,5579,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 179.949139][ T5579] (syz.2.291,5579,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 179.970237][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 179.992270][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.022467][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.058149][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.097767][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.127488][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.158620][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.190205][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x5 [ 180.228284][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.266054][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.348494][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.796385][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.804669][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.811660][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 180.819053][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 181.164694][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 181.171724][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 181.179715][ T7] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 181.187241][ T7] cougar 0003:060B:500A.0001: unexpected long global item [ 181.202862][ T7] cougar 0003:060B:500A.0001: parse failed [ 181.209267][ T7] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 181.224271][ T7] usb 4-1: USB disconnect, device number 5 [ 181.242927][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 181.386404][ T5592] loop4: detected capacity change from 0 to 512 [ 181.429701][ T5592] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.447258][ T5592] EXT4-fs: inline encryption not supported [ 181.470291][ T5592] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.493278][ T5592] EXT4-fs (loop4): Test dummy encryption mode enabled [ 181.500121][ T5592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 181.519506][ T5586] loop3: detected capacity change from 0 to 32768 [ 181.552246][ T5592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.594592][ T5586] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 181.681912][ T5586] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.725413][ T5592] EXT4-fs (loop4): 1 truncate cleaned up [ 181.731470][ T5592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.209978][ T5592] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 182.255422][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 182.261471][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 183.128102][ T4264] ocfs2: Unmounting device (7,3) on (node local) [ 183.440663][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 183.543815][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 183.549909][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 183.644616][ T5626] loop0: detected capacity change from 0 to 512 [ 183.773847][ T5610] ceph: No mds server is up or the cluster is laggy [ 183.844090][ T5626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.853374][ T5626] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.873112][ T5626] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 183.944782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.945412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.075684][ T26] audit: type=1804 audit(1757170955.691:15): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.301" name="/newroot/61/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 184.108169][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 184.126185][ T5632] loop4: detected capacity change from 0 to 1024 [ 184.255581][ T5632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.570314][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 184.661784][ T5645] fuse: Bad value for 'fd' [ 185.499946][ T5654] loop3: detected capacity change from 0 to 512 [ 186.057909][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 186.064488][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 186.070704][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 186.078034][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 186.085380][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 186.225576][ T5654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.369561][ T5654] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.601260][ T5663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.310: bg 0: block 217: padding at end of block bitmap is not set [ 186.658540][ T5661] loop0: detected capacity change from 0 to 32768 [ 186.666975][ T5661] (syz.0.308,5661,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 186.676545][ T5661] (syz.0.308,5661,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 186.714860][ T4255] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.014388][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 187.058469][ T5668] loop1: detected capacity change from 0 to 1024 [ 189.064044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.440219][ T5679] loop3: detected capacity change from 0 to 32768 [ 189.454517][ T5679] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.315 (5679) [ 189.703389][ T5679] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.713749][ T5679] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 189.722413][ T5679] BTRFS info (device loop3): using free space tree [ 190.527576][ T5699] loop1: detected capacity change from 0 to 1024 [ 190.633507][ T5679] BTRFS info (device loop3): enabling ssd optimizations [ 190.704141][ T5679] netlink: 84 bytes leftover after parsing attributes in process `syz.3.315'. [ 192.895048][ T5719] hfsplus: xattr searching failed [ 193.042249][ T26] audit: type=1800 audit(1757170964.721:16): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.317" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 193.451850][ T4264] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.184908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.191495][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202942][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.178536][ T5722] loop4: detected capacity change from 0 to 32768 [ 195.328936][ T5722] XFS (loop4): Mounting V5 Filesystem [ 195.916186][ T5722] XFS (loop4): Ending clean mount [ 197.022190][ T4263] XFS (loop4): Unmounting Filesystem [ 197.094306][ T5772] loop2: detected capacity change from 0 to 8 [ 198.726258][ T5784] loop4: detected capacity change from 0 to 32768 [ 198.926540][ T5784] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 199.158018][ T26] audit: type=1804 audit(1757170970.981:17): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.333" name="/newroot/72/file1/bus" dev="loop4" ino=9553 res=1 errno=0 [ 199.356914][ T5797] loop2: detected capacity change from 0 to 256 [ 199.557160][ T5797] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 199.782901][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 199.827912][ T5803] exFAT-fs (loop2): hint_cluster is invalid (17) [ 200.352370][ T5808] Error parsing options; rc = [-22] [ 200.402733][ T5808] loop4: detected capacity change from 0 to 64 [ 200.458482][ T5808] hfs: get root inode failed [ 201.746178][ T4255] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.226901][ T5832] loop4: detected capacity change from 0 to 32768 [ 203.234865][ T5832] (syz.4.347,5832,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 203.244591][ T5832] (syz.4.347,5832,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 204.424861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.035313][ T5846] loop2: detected capacity change from 0 to 1024 [ 205.199211][ T5846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.392575][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 206.941437][ T5864] loop3: detected capacity change from 0 to 22 [ 207.000697][ T5864] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 207.133235][ T5864] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 208.256559][ T5877] loop0: detected capacity change from 0 to 1024 [ 208.466457][ T5880] loop4: detected capacity change from 0 to 1024 [ 209.038008][ T5880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.755766][ T5893] hfsplus: xattr searching failed [ 210.761249][ T26] audit: type=1800 audit(1757170982.581:18): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.365" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 211.236441][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 212.025914][ T5903] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.038321][ T5903] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 213.237895][ T26] audit: type=1800 audit(1757170985.051:19): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.378" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 213.939721][ T5932] loop0: detected capacity change from 0 to 1024 [ 214.160849][ T5932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.429438][ T4331] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 214.655028][ T4331] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 214.760836][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.833921][ T4331] usb 3-1: config 0 descriptor?? [ 214.873038][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 215.072663][ T4331] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 217.444107][ T5955] loop3: detected capacity change from 0 to 32768 [ 217.476477][ T5955] XFS (loop3): stripe width (64) must be a multiple of the stripe unit (2048) [ 217.486704][ T5950] loop4: detected capacity change from 0 to 65536 [ 217.544925][ T5966] loop1: detected capacity change from 0 to 128 [ 217.618841][ T5950] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 217.631375][ T5950] XFS (loop4): Mounting V5 Filesystem [ 217.640478][ T5966] affs: Unrecognized mount option "reserved=00000000000000000009" or missing value [ 217.864925][ T5966] affs: Error parsing options [ 218.114708][ T5950] XFS (loop4): Ending clean mount [ 218.205211][ T5950] XFS (loop4): Quotacheck needed: Please wait. [ 218.802815][ T4331] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 219.012697][ T5950] XFS (loop4): Quotacheck: Done. [ 219.021435][ T4331] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 219.111027][ T4331] asix: probe of 3-1:0.0 failed with error -71 [ 219.141057][ T4263] XFS (loop4): Unmounting Filesystem [ 219.174259][ T4331] usb 3-1: USB disconnect, device number 2 [ 219.296444][ T5993] loop2: detected capacity change from 0 to 1024 [ 219.389304][ T5993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.611656][ T5999] fuse: Bad value for 'fd' [ 220.526848][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 224.913541][ T6036] Error parsing options; rc = [-22] [ 225.046210][ T6037] loop2: detected capacity change from 0 to 512 [ 225.210244][ T6036] loop4: detected capacity change from 0 to 64 [ 225.243084][ T6036] hfs: get root inode failed [ 225.312545][ T6037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.321744][ T6037] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.342948][ T26] audit: type=1804 audit(1757170997.161:20): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.402" name="/newroot/78/file1/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 225.343937][ T6035] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 225.835213][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 225.975740][ T6049] loop2: detected capacity change from 0 to 1024 [ 226.028191][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 226.225245][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 226.456639][ T6058] loop2: detected capacity change from 0 to 256 [ 226.537048][ T6058] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 227.556831][ T6065] loop0: detected capacity change from 0 to 256 [ 227.599441][ T6065] exfat: Deprecated parameter 'namecase' [ 227.664920][ T6065] exfat: Deprecated parameter 'utf8' [ 227.732493][ T6065] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 227.970668][ T6067] loop1: detected capacity change from 0 to 2048 [ 228.176077][ T6067] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 228.344557][ T6067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.575796][ T26] audit: type=1800 audit(1757171001.401:21): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.413" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 231.197092][ T6095] Error parsing options; rc = [-22] [ 231.475815][ T6095] loop1: detected capacity change from 0 to 64 [ 231.516350][ T6095] hfs: get root inode failed [ 233.684119][ T6115] loop0: detected capacity change from 0 to 1024 [ 233.759082][ T6115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.060528][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 239.890217][ T6168] Error parsing options; rc = [-22] [ 239.899875][ T6168] loop2: detected capacity change from 0 to 64 [ 239.915281][ T6168] hfs: get root inode failed [ 240.039250][ T6179] loop4: detected capacity change from 0 to 256 [ 240.080923][ T6179] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 240.107118][ T6179] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 244.542056][ T6219] Error parsing options; rc = [-22] [ 244.552053][ T6219] loop3: detected capacity change from 0 to 64 [ 244.561443][ T6219] hfs: get root inode failed [ 245.347618][ T4799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.983322][ T6231] loop4: detected capacity change from 0 to 512 [ 247.125292][ T6231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.134493][ T6231] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.150401][ T6231] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 247.168691][ T26] audit: type=1804 audit(1757171018.971:22): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.455" name="/newroot/94/file1/file0/file0" dev="loop4" ino=13 res=1 errno=0 [ 248.410777][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 250.256965][ T6271] tmpfs: Unknown parameter 'quota' [ 252.716649][ T6294] loop1: detected capacity change from 0 to 1024 [ 252.924106][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.509443][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 255.004258][ T6321] fuse: Bad value for 'fd' [ 255.011683][ T6321] 9pnet_fd: Insufficient options for proto=fd [ 255.745119][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.755595][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.332315][ T6358] Error parsing options; rc = [-22] [ 258.344526][ T6358] loop3: detected capacity change from 0 to 64 [ 258.424741][ T6360] Error parsing options; rc = [-22] [ 258.434068][ T6360] loop0: detected capacity change from 0 to 64 [ 258.708269][ T6358] hfs: get root inode failed [ 258.737786][ T6360] hfs: get root inode failed [ 259.427107][ T6362] fuse: Bad value for 'fd' [ 259.437217][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 262.392739][ T6398] loop0: detected capacity change from 0 to 1024 [ 262.883897][ T6398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 263.597856][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 264.583761][ T26] audit: type=1800 audit(1757171036.121:23): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.513" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 265.509671][ T6434] fuse: Bad value for 'fd' [ 265.517377][ T6434] 9pnet_fd: Insufficient options for proto=fd [ 269.621322][ T6468] tmpfs: Unknown parameter 'quota' [ 270.210846][ T6476] Error parsing options; rc = [-22] [ 270.221721][ T6476] loop1: detected capacity change from 0 to 64 [ 270.471832][ T6476] hfs: get root inode failed [ 270.966442][ T6485] loop4: detected capacity change from 0 to 1024 [ 271.712125][ T6488] fuse: Bad value for 'fd' [ 271.964640][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.173893][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 274.414963][ T6522] loop0: detected capacity change from 0 to 256 [ 274.587672][ T6524] tmpfs: Unknown parameter 'quota' [ 274.880813][ T6522] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 275.030835][ T6522] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 278.886103][ T6550] fuse: Bad value for 'fd' [ 282.644040][ T6590] loop0: detected capacity change from 0 to 256 [ 282.724867][ T6590] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 282.803587][ T6590] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 284.130992][ T6604] loop4: detected capacity change from 0 to 512 [ 284.252441][ T6604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.331063][ T6604] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.484267][ T26] audit: type=1804 audit(1757171056.311:24): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.561" name="/newroot/115/file1/file0/file0" dev="loop4" ino=13 res=1 errno=0 [ 284.486594][ T6604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 286.093522][ T6619] fuse: Bad value for 'fd' [ 286.114055][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 288.206119][ T6635] tmpfs: Unknown parameter 'quota' [ 288.936257][ T6643] loop3: detected capacity change from 0 to 1024 [ 289.014955][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 289.095916][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 289.244658][ T6656] loop3: detected capacity change from 0 to 256 [ 289.270370][ T6656] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 289.292366][ T6656] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 290.650274][ T6676] fuse: Bad value for 'fd' [ 290.658087][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 293.474424][ T6691] tmpfs: Unknown parameter 'quota' [ 294.270779][ T6696] loop1: detected capacity change from 0 to 1024 [ 294.328522][ T6696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.573450][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 295.351866][ T6720] loop2: detected capacity change from 0 to 256 [ 295.421656][ T6704] loop4: detected capacity change from 0 to 32768 [ 295.435270][ T6704] (syz.4.590,6704,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 295.445767][ T6704] (syz.4.590,6704,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 295.572708][ T6720] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 295.810550][ T6720] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 297.150882][ T6726] fuse: Bad value for 'fd' [ 297.159743][ T6726] 9pnet_fd: Insufficient options for proto=fd [ 299.603014][ T6746] loop2: detected capacity change from 0 to 1024 [ 300.138912][ T6746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 300.893255][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 303.085270][ T6780] loop2: detected capacity change from 0 to 256 [ 303.184668][ T6780] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 303.240029][ T6780] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 306.713629][ T6811] loop2: detected capacity change from 0 to 512 [ 307.379466][ T6811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 307.388499][ T6811] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.436876][ T6808] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 307.523528][ T26] audit: type=1804 audit(1757171079.261:25): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.622" name="/newroot/119/file1/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 307.657219][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 311.955084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.200741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.209949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.252203][ T6861] tmpfs: Unknown parameter 'quota' [ 313.856286][ T6881] Error parsing options; rc = [-22] [ 313.866008][ T6881] loop2: detected capacity change from 0 to 64 [ 313.962744][ T6881] hfs: get root inode failed [ 314.628127][ T6883] loop2: detected capacity change from 0 to 1024 [ 314.719234][ T6883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 314.790855][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 317.085837][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.092764][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.365786][ T6922] Error parsing options; rc = [-22] [ 318.375360][ T6922] loop0: detected capacity change from 0 to 64 [ 318.849925][ T6922] hfs: get root inode failed [ 320.266289][ T4799] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.311398][ T6929] loop4: detected capacity change from 0 to 1024 [ 320.626251][ T6929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.506609][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 322.184993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.772423][ T6978] Device name cannot be null; rc = [-22] [ 324.824538][ T6978] loop0: detected capacity change from 0 to 64 [ 325.289523][ T6978] hfs: get root inode failed [ 326.680717][ T6994] loop4: detected capacity change from 0 to 1024 [ 327.383390][ T26] audit: type=1800 audit(1757171099.121:26): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.670" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.899879][ T7003] hfsplus: xattr searching failed [ 328.274346][ T26] audit: type=1800 audit(1757171099.731:27): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 328.808363][ T7006] tmpfs: Unknown parameter 'quota' [ 330.454313][ T7027] loop0: detected capacity change from 0 to 512 [ 331.324711][ T7027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.334442][ T7027] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.352936][ T7025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 331.367983][ T26] audit: type=1804 audit(1757171103.171:28): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.675" name="/newroot/142/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 331.964159][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 335.897195][ T7057] tmpfs: Unknown parameter 'quota' [ 337.759464][ T7078] loop4: detected capacity change from 0 to 1024 [ 337.993388][ T4339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 338.765137][ T7083] hfsplus: xattr searching failed [ 339.033220][ T26] audit: type=1800 audit(1757171110.591:29): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.688" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 339.155207][ T4339] usb 1-1: config 0 interface 0 has no altsetting 0 [ 339.164329][ T4339] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 339.343280][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.364796][ T4339] usb 1-1: config 0 descriptor?? [ 339.779740][ T4339] zeroplus 0003:0C12:0005.0002: item fetching failed at offset 0/3 [ 339.793785][ T4339] zeroplus 0003:0C12:0005.0002: parse failed [ 339.807341][ T4339] zeroplus: probe of 0003:0C12:0005.0002 failed with error -22 [ 340.161952][ T4339] usb 1-1: USB disconnect, device number 2 [ 341.022236][ T7101] tmpfs: Unknown parameter 'quota' [ 343.141981][ T7103] fuse: Bad value for 'fd' [ 344.347301][ T7138] loop2: detected capacity change from 0 to 1024 [ 346.857169][ T7153] tmpfs: Unknown parameter 'quota' [ 347.783809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.195035][ T7176] loop2: detected capacity change from 0 to 1024 [ 350.447267][ T7168] loop1: detected capacity change from 0 to 32768 [ 350.454766][ T7168] (syz.1.713,7168,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 350.630752][ T7168] (syz.1.713,7168,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 351.362275][ T7176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 352.661477][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 352.836684][ T7201] tmpfs: Unknown parameter 'quota' [ 353.158431][ T7198] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 356.073522][ T7221] fuse: Bad value for 'fd' [ 356.108078][ T7207] loop0: detected capacity change from 0 to 32768 [ 356.473423][ T4324] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 356.583290][ T4799] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.685599][ T4324] usb 4-1: config 0 has no interfaces? [ 356.694511][ T4324] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.753251][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.761297][ T4324] usb 4-1: Product: syz [ 356.775969][ T4324] usb 4-1: Manufacturer: syz [ 356.780622][ T4324] usb 4-1: SerialNumber: syz [ 356.820902][ T4324] usb 4-1: config 0 descriptor?? [ 357.807376][ T7225] device veth0_vlan left promiscuous mode [ 357.871450][ T7225] device veth0_vlan entered promiscuous mode [ 357.968443][ T126] usb 4-1: USB disconnect, device number 6 [ 358.001975][ T7249] tmpfs: Unknown parameter 'quota' [ 358.122626][ T7252] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 358.129652][ T7252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 358.146831][ T7252] vhci_hcd vhci_hcd.0: Device attached [ 359.266813][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 359.354846][ T4317] vhci_hcd: vhci_device speed not set [ 360.148366][ T951] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 360.156789][ T4317] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 360.168755][ T7265] fuse: Bad value for 'fd' [ 360.193284][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 360.200147][ T4324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.233102][ T7270] loop4: detected capacity change from 0 to 1024 [ 360.265523][ T4324] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 360.396564][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.534373][ T4324] usb 3-1: config 0 descriptor?? [ 360.557800][ T4324] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 360.572576][ T951] usb 2-1: config 0 has no interfaces? [ 360.582015][ T951] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.665471][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.728307][ T951] usb 2-1: config 0 descriptor?? [ 361.007466][ T14] usb 2-1: USB disconnect, device number 2 [ 361.014749][ T7254] vhci_hcd: unknown pdu 2 [ 361.169221][ T46] vhci_hcd: stop threads [ 361.174951][ T4317] vhci_hcd: vhci_device speed not set [ 361.206566][ T46] vhci_hcd: release socket [ 361.241416][ T46] vhci_hcd: disconnect device [ 361.263542][ T4317] usb 35-1: device descriptor read/64, error -71 [ 361.473417][ T4317] vhci_hcd: vhci_device speed not set [ 361.867669][ T4324] gspca_vc032x: reg_w err -71 [ 361.872444][ T4324] vc032x: probe of 3-1:0.0 failed with error -71 [ 361.933455][ T4324] usb 3-1: USB disconnect, device number 3 [ 362.465926][ T7292] tmpfs: Unknown parameter 'quota' [ 365.649462][ T7331] loop3: detected capacity change from 0 to 512 [ 366.432542][ T7329] loop2: detected capacity change from 0 to 512 [ 366.656482][ T7331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 366.666081][ T7331] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.730762][ T7329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 366.740426][ T7329] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.907263][ T7331] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 366.923721][ T26] audit: type=1804 audit(1757171138.721:30): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.755" name="/newroot/152/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 367.045222][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 367.225057][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 368.712887][ T7357] [ 368.715621][ T7357] ============================= [ 368.720478][ T7357] WARNING: suspicious RCU usage [ 368.725442][ T7357] syzkaller #0 Not tainted [ 368.729859][ T7357] ----------------------------- [ 368.734732][ T7357] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 368.743324][ T7357] [ 368.743324][ T7357] other info that might help us debug this: [ 368.743324][ T7357] [ 368.753589][ T7357] [ 368.753589][ T7357] rcu_scheduler_active = 2, debug_locks = 1 [ 368.761672][ T7357] 1 lock held by syz.3.759/7357: [ 368.766685][ T7357] #0: ffffffff8cb2ab60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 368.777066][ T7357] [ 368.777066][ T7357] stack backtrace: [ 368.782979][ T7357] CPU: 0 PID: 7357 Comm: syz.3.759 Not tainted syzkaller #0 [ 368.790273][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.800349][ T7357] Call Trace: [ 368.803638][ T7357] [ 368.806572][ T7357] dump_stack_lvl+0x168/0x22e [ 368.811260][ T7357] ? show_regs_print_info+0x12/0x12 [ 368.816468][ T7357] ? load_image+0x3b0/0x3b0 [ 368.820994][ T7357] lockdep_rcu_suspicious+0x1dd/0x300 [ 368.826381][ T7357] get_callchain_entry+0x2a5/0x3b0 [ 368.831506][ T7357] get_perf_callchain+0x9f/0x480 [ 368.836632][ T7357] ? preempt_schedule_irq+0xd0/0x150 [ 368.841938][ T7357] ? put_callchain_entry+0xb0/0xb0 [ 368.847064][ T7357] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 368.853064][ T7357] ? lock_chain_count+0x20/0x20 [ 368.857931][ T7357] __bpf_get_stack+0x2ce/0x4f0 [ 368.862706][ T7357] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 368.868354][ T7357] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 368.874522][ T7357] ? bpf_get_stack+0x18/0x40 [ 368.879132][ T7357] ? bpf_prog_d43750871481577d+0x3d/0x41 [ 368.884787][ T7357] bpf_get_stack_raw_tp+0x189/0x1c0 [ 368.890003][ T7357] bpf_prog_d43750871481577d+0x3d/0x41 [ 368.895479][ T7357] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 368.900867][ T7357] bpf_prog_test_run_syscall+0x30d/0x490 [ 368.906514][ T7357] ? sock_gen_cookie+0x60/0x60 [ 368.911289][ T7357] ? bpf_prog_test_run+0x312/0x390 [ 368.916497][ T7357] ? sock_gen_cookie+0x60/0x60 [ 368.921267][ T7357] bpf_prog_test_run+0x31e/0x390 [ 368.926218][ T7357] __sys_bpf+0x593/0x6d0 [ 368.930474][ T7357] ? bpf_link_show_fdinfo+0x340/0x340 [ 368.935871][ T7357] ? lock_chain_count+0x20/0x20 [ 368.940742][ T7357] __x64_sys_bpf+0x78/0x90 [ 368.945173][ T7357] do_syscall_64+0x4c/0xa0 [ 368.949600][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 368.954302][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 368.959022][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.964927][ T7357] RIP: 0033:0x7fa50538ebe9 [ 368.969349][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.988980][ T7357] RSP: 002b:00007fa5061c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.997394][ T7357] RAX: ffffffffffffffda RBX: 00007fa5055c6180 RCX: 00007fa50538ebe9 [ 369.005376][ T7357] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 369.013339][ T7357] RBP: 00007fa505411e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.021298][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.029257][ T7357] R13: 00007fa5055c6218 R14: 00007fa5055c6180 R15: 00007fff1cea71c8 [ 369.037232][ T7357] [ 378.514715][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.521057][ T1267] ieee802154 phy1 wpan1: encryption failed: -22