last executing test programs: 1m46.619944488s ago: executing program 0 (id=430): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r1, r2) setfsuid(r1) 1m44.861614932s ago: executing program 0 (id=433): r0 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m42.969544754s ago: executing program 0 (id=436): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000a40)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) memfd_secret(0x0) 1m39.669952792s ago: executing program 0 (id=441): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") 1m37.688607624s ago: executing program 4 (id=445): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5457, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m37.656855834s ago: executing program 0 (id=447): r0 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m35.989406638s ago: executing program 4 (id=451): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000a40)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) memfd_secret(0x0) 1m33.759697869s ago: executing program 4 (id=453): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b}) mq_timedsend(r3, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) clock_gettime(0x0, &(0x7f0000001a80)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1m32.358110844s ago: executing program 0 (id=456): add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) 1m32.357746654s ago: executing program 1 (id=457): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x5, 0x5, 0xb48, 0x7, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x7, 0x0, 0x2, 0x2, 'syz1\x00', &(0x7f00000000c0)=['-\'/+-&)\x00', '.*\x00'], 0xb}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000016c0)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x004F\x9f\xba\x10?\x14Fi\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x06$\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06\xc4\x92)4n\xe7\xc1\xd4\xb3\x86jm\x87&\xf0\x12\xfd\x99%Z\xfa[5\xe8)\xab\x8f\"\xb5*@\xa6\xf5\r\xe1\xb2\xf6\xc9.n~_\x95a\\\xaem\xb9`\xec\xed\xe8\xbf[\x8aEzT\xe0\xc4m\x81\xee\xbc)K\xc2{a\x88\xa2\xd8J\xc3/\a\xe8\xfc\xc3\x9f%\x8a+\xd6\xc7\xda\xca\xf1\xd34\xf8\xea\v\xee\xbc\x11\xc6\xafj\x19\x18\xba\x05\xb4W\xaf\xed\xed\xea\xcc\x0e', 0x0) r6 = dup(r5) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) pread64(r6, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 1m32.338766714s ago: executing program 4 (id=458): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM") 1m31.21214164s ago: executing program 32 (id=456): add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) 1m31.19993085s ago: executing program 4 (id=463): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000a40)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) memfd_secret(0x0) 1m30.332494836s ago: executing program 1 (id=465): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) 1m30.057351405s ago: executing program 4 (id=467): r0 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m29.485864193s ago: executing program 1 (id=469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b}) mq_timedsend(r3, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) clock_gettime(0x0, &(0x7f0000001a80)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1m28.091236077s ago: executing program 33 (id=467): r0 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m27.965554107s ago: executing program 1 (id=473): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM") 1m26.866884952s ago: executing program 1 (id=476): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000a40)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) memfd_secret(0x0) 1m25.993560109s ago: executing program 1 (id=478): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) 1m25.599667548s ago: executing program 34 (id=478): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) 18.641375792s ago: executing program 2 (id=551): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x40, &(0x7f00000003c0)) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x3) 13.636322192s ago: executing program 5 (id=555): socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4) fcntl$setsig(r1, 0xa, 0x21) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 13.556455472s ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0xe, 0x300, 0xfa, 0x101}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12.406913368s ago: executing program 2 (id=557): r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12.037133647s ago: executing program 5 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r5 = syz_open_procfs(0x0, 0x0) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 10.082010659s ago: executing program 5 (id=559): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0xff0a, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt(r4, 0x470, 0xfffffffa, &(0x7f0000000480)="b7d5739ea066701ab1a6d679462464a54f6938296c5c12acf70d2d418d2947038a3bb2e94170bad335691d28d53a46b3d57dc529ecb1b466094c27a294b60f34532b6a0449daf44b716c7ec8e14c7b10102ded86c59711a3c92867bbd8e4c5f6b2972813fa4b2351de0218ecae6083a1f40b40644389945aee776c184c846f1d826c7ff6ee59b63aa1eaff7669e2bb50d809bdebb4ca5172e885a6a998e1f69a5dea31c0d738d9e1b8fd8e61e376810777b6a7c00c", 0xb5) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000300)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) connect$rose(0xffffffffffffffff, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x16, @string={0x16, 0x3, "006996f0e1ec48d14177f7c9d3a269c833b9e4a9"}}, 0x0, 0x0, 0x0}, 0x0) 9.954669638s ago: executing program 2 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x101301) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0xc0185500, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM") 9.893578058s ago: executing program 3 (id=561): r0 = socket(0x11, 0x800000003, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x10, 0x2, 0x10) r1 = getpid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = io_uring_setup(0x2e34, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000080)={0x2}) close(r6) close_range(r5, 0xffffffffffffffff, 0x0) 6.309224134s ago: executing program 5 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r4, r5) setfsuid(r4) prctl$PR_SET_PTRACER(0x59616d61, r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x20) socket(0x10, 0x803, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000140)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@block={'block', 0x3d, 0x600}}, {@mode={'mode', 0x3d, 0x6}}, {@gid, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@sbsector={'sbsector', 0x3d, 0xd280}}, {@map_acorn}, {@overriderock}, {@gid}]}, 0xfd, 0x6b1, &(0x7f0000000840)="$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") socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001900000429bd7000fedbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x41) 4.787653988s ago: executing program 3 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4008880) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000)=r1, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) close_range(r0, 0xffffffffffffffff, 0x0) 4.551793188s ago: executing program 5 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(0x0, 0x75, 0x101301) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") 3.949324965s ago: executing program 2 (id=565): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x40, &(0x7f00000003c0)) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x3) 3.875521055s ago: executing program 3 (id=566): socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4) fcntl$setsig(r1, 0xa, 0x21) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 2.37418641s ago: executing program 3 (id=567): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x803, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xca) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x1ff) 1.321216775s ago: executing program 3 (id=568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b}) mq_timedsend(r3, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f0000001a80)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.220333705s ago: executing program 2 (id=569): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4436, &(0x7f0000004480)="$eJzs3c9PXNUeAPBzL/QV+to+6OtL+pKXvElsolFDoCuVJlJKS6HFmmob42Y6wLRFB6aBwbjoAndNXJm4MC6amrhj1XThtv4JblzWlYsmunBjYtKImZk7wL3MhJEwYOvns+DOPb/he++ZcxeXEycqt+aWcnNLucJCrjxzY+lU7qNyaXm+GOI90rT/A3vXP+3pxHWy39fe39nls+ffuXYqhG9nv3+ytra2Fqq6Q1NDmz7/+sudmc3HhjhTp9pu89Z2y/shhONbxlXVFUJ475sQohDCmSRtNDn2hhCOhHretTufXs/t0mgePC6ezj+duvtw+OTk6r2HrX/3KIQvS/999eb8Ty90Df/w8i51DwAAAAAAAAAAAAAAAADAM278yuWrbw8OhUdR6F6Ntr6vO54cW70fu7Zr/t/5XxYAAAAAAAAAAAAAAAAAAAD+ojbe/89Fx5q8/z+WHEda1F97s/NjpHMm3ro8dm5wKNn/PdqS/1qS9POZrtDfZN/37P7vZzL1m+//vrWfnWqMr9FvX4jigdR5HA8MhPBVsvH7iehQXCovVV65UV5emN21YTyz0vGv796fik6yoX+78R/NtN/5/f//veVqqp5f371L7LmWjn9Xy3JffxK1Ff+zmXp7EX92Lh3/7lpa7+YCI/UJoBr/z7q3j/9Ypv1Oxf9oCCEXVceaS80A1TVMNb3VeoW0dPwP1NJSU2fyh2x1//+Wif+5TPv7Nf+vZL+IaCod/3/U0npSJTbu//54+/v/fKb9/Yh/dfwrvv/bko7/wXpid6pI7S/Z7vw/nmm/U/G/GifjPBqlroDVqJ7e6v/VkZaOf8+W/I3nv7it9d+FTP29ev5r9Nt4/mtM/y9F9ec/mkvHv7dluXbv/4lMvU7P/yO19R87lY7/oVpaeu3cV/vZbvwnM+1n4//jP3dn3LVVSU8j/hvzye8H6+n3rf/ako5/Epx4c4mV2s/a+i/afv1/MdP+fqz/quNfiTvb6/MiHf/D2ez/DCcfqvH/ro3v/0uZBjof/xAGrfV3LB3/Iy3L1e7/nu3jP5Wp1+n4v9jJxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeAaPJsS9E8UDqPI4HBkI4m5yfCIei6cJsfrpUnvlwKYSxJD0XjkU3S+XpQik/t1CeLeYLpVJ5JoRzSf7x0BMtlcqV/Hzh9vn1tnqjW8XCYmW6WKiEEMaT9P+FI422pucq84XbIYQL63n/isuLt28VFvKzc4tvDA4ODoaJ9TH0R8WPK8WFSr33em4Ik+t1+6JNg6tlX1wfy+Hog/Ly4kKhVEu/tKlOqTxTKG2qM5XkfR76o8ri8sJMoVLMl8o3G/3tp5HkODZx5d0rl4a25F+P6sfRvR0WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/So+HXvwghdNfP4hDCSOND1Kz8g8fF0/mnU3cfDp+cXL13/0mrcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZeOUSIGojAAvxkLY+cxrELS2UYU0cKI4An0GB5Gj+IlvIOFha2FCDoDkp3ANrvV9zUP8hPeg/kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDuXd/P97TBGpOi+DyNeH9/e/+fXZT6ftf8/2MON7M7VzXx+MYzl3dNGflo+fUz5N/36fHqIxqxeFj1Z9ulP3XO0elerb12jbPW+uvc4Uu4jYir5Scq571fXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W2fRtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKwAAAD//2ASIEg=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) getgroups(0x27, &(0x7f0000002540)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x3000, 0xffffffff000, 0x0, 0x0, 0x2}) 824.232433ms ago: executing program 5 (id=570): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000003d09022400010000c04009040000010300000009210900000122a000090581034000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) flock(0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r1, 0x20049549e2a2d659) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x2}}, 0x18) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20080522}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 0s ago: executing program 3 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x20, 0xbffd, 0x0, 0x710, 0xf, "72e60e0c8c278054"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB], 0x48) kernel console output (not intermixed with test programs): 263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.174292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.182622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.192687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.226579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.237664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.246442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.256473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.265753][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.272945][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.282268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.291336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.301847][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.309015][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.317040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.326365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.335389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.345071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.354136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.363153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.372161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.379736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.387642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.396665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.405157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.446652][ T4263] device veth0_vlan entered promiscuous mode [ 81.461660][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.468802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.477852][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.487447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.496663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.505954][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.522240][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.531576][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.540647][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.549515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.557887][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.567508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.578792][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.587513][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.596802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.611383][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.643883][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.666074][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.685143][ T4263] device veth1_vlan entered promiscuous mode [ 81.705308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.718472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.727623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.737831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.748760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.804873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.821728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.839994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.863309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.897085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.921014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.981209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.001521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.019942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.039730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.059922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.070250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.087881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.109854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.130964][ T4254] device veth0_vlan entered promiscuous mode [ 82.140011][ T4263] device veth0_macvtap entered promiscuous mode [ 82.172139][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.181615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.192287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.203580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.218108][ T4254] device veth1_vlan entered promiscuous mode [ 82.241541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.252703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.261401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.271792][ T4263] device veth1_macvtap entered promiscuous mode [ 82.297702][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.348317][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.372478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.382083][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.392226][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.401772][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.411276][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.420825][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.431538][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.441381][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.453164][ T4254] device veth0_macvtap entered promiscuous mode [ 82.483798][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.504523][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.520133][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.540306][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.566422][ T4254] device veth1_macvtap entered promiscuous mode [ 82.594442][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618456][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.636077][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645690][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675318][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.686594][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.703927][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.736000][ T4259] device veth0_vlan entered promiscuous mode [ 82.750789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.765481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.775135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.791398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.808422][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.820641][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.832844][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.845863][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.854777][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.864352][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.874187][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.889359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.897470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.916104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.924439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.932512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.942810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.983725][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.007398][ T4259] device veth1_vlan entered promiscuous mode [ 83.029189][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 83.039369][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 83.045607][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 83.052509][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 83.087915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.110384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.119446][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 83.127665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.136436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.152443][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.157794][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.176913][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.216364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.239315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.247904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.273475][ T4259] device veth0_macvtap entered promiscuous mode [ 83.291631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.301108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.316742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.343614][ T4259] device veth1_macvtap entered promiscuous mode [ 83.375937][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.388865][ T4250] device veth0_vlan entered promiscuous mode [ 83.395912][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.408950][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.420023][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.434776][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.444407][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.453668][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.462549][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.501629][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.511975][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.535197][ T4250] device veth1_vlan entered promiscuous mode [ 83.550371][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.569319][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.588893][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.610427][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.624490][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.633325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.643120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.652520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.661813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.696010][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.707555][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.720984][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.732047][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.744494][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.793072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.817428][ T4335] loop0: detected capacity change from 0 to 16 [ 83.820573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.834479][ T4335] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.869854][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.881730][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.895962][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.906983][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.055756][ T4250] device veth0_macvtap entered promiscuous mode [ 84.068182][ T4250] device veth1_macvtap entered promiscuous mode [ 84.113705][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.124985][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.135326][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.170588][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.404985][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.466756][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553638][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.895866][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.915132][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.925418][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.936074][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.945165][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.955078][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.964471][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.974359][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.984520][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.025280][ T4257] device veth0_vlan entered promiscuous mode [ 85.046780][ T4257] device veth1_vlan entered promiscuous mode [ 85.084921][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.109193][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 85.109255][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 85.115243][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 85.121294][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 85.139659][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.148807][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.164504][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.179938][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.189157][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 85.205458][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.225858][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.234930][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.235323][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.251475][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.273277][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.296053][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.307705][ T4257] device veth0_macvtap entered promiscuous mode [ 85.325435][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.328975][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.348372][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.365980][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.376947][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.389732][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.400910][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419955][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.441098][ T4257] device veth1_macvtap entered promiscuous mode [ 85.462472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.471961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.480537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.488551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.503520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.541057][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573145][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.599005][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.607767][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.644338][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.658488][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.664773][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.695267][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.719077][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.749292][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.769770][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.780951][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.799469][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.827195][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.856821][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.932988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.960478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.980098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.002558][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.024298][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.227443][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.239307][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.249438][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.260314][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.275340][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.286982][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308761][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.749141][ T4353] loop0: detected capacity change from 0 to 40427 [ 87.792349][ T952] cfg80211: failed to load regulatory.db [ 87.818863][ C0] sched: RT throttling activated [ 87.852251][ T4353] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 87.861699][ T4353] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 87.976603][ T4353] F2FS-fs (loop0): invalid crc value [ 88.053872][ T4353] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.257457][ T4353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.775855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.791325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.809454][ T4257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.830353][ T4257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.844428][ T4257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.854901][ T4257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944363][ T4263] syz-executor: attempt to access beyond end of device [ 89.944363][ T4263] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.014377][ T4361] loop3: detected capacity change from 0 to 1024 [ 90.193446][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.210891][ T4363] random: crng reseeded on system resumption [ 90.225070][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.287739][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.323725][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.354143][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.366502][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.387242][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.409064][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.492536][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.526562][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.537434][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.588544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.943624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.353335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.558077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.682014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.690408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.698796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.707106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.715443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.726035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 91.865286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.921660][ T4378] loop2: detected capacity change from 0 to 64 [ 92.287263][ T4327] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.568603][ T4367] loop4: detected capacity change from 0 to 256 [ 92.576216][ T4367] exfat: Unknown parameter '©ãÉG–t' [ 92.621809][ T4327] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.925484][ T4385] loop0: detected capacity change from 0 to 8 [ 93.087637][ T4384] loop2: detected capacity change from 0 to 4096 [ 93.123534][ T4368] syz.4.5 (4368): drop_caches: 2 [ 93.131771][ T4385] SQUASHFS error: xz decompression failed, data probably corrupt [ 93.199192][ T4385] SQUASHFS error: Failed to read block 0x108: -5 [ 93.205791][ T4385] SQUASHFS error: Unable to read metadata cache entry [106] [ 93.224858][ T4385] SQUASHFS error: Unable to read inode 0x11f [ 93.385978][ T4387] loop4: detected capacity change from 0 to 2048 [ 93.532477][ T4387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.963351][ T4254] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 93.979107][ T4254] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 94.433830][ T4397] loop2: detected capacity change from 0 to 2048 [ 94.516546][ T4397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.443130][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 95.457988][ T4265] Bluetooth: hci5: sending frame failed (-49) [ 95.465549][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 96.027592][ T4399] loop1: detected capacity change from 0 to 32768 [ 96.082259][ T4413] loop3: detected capacity change from 0 to 8 [ 96.083428][ T4399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.17 (4399) [ 96.258410][ T4399] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.323130][ T4399] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 96.328462][ T4413] SQUASHFS error: xz decompression failed, data probably corrupt [ 96.377180][ T4413] SQUASHFS error: Failed to read block 0x108: -5 [ 96.377348][ T4399] BTRFS info (device loop1): setting nodatasum [ 96.401151][ T4413] SQUASHFS error: Unable to read metadata cache entry [106] [ 96.415501][ T4413] SQUASHFS error: Unable to read inode 0x11f [ 96.439715][ T4399] BTRFS info (device loop1): force zlib compression, level 3 [ 96.455121][ T4399] BTRFS info (device loop1): metadata ratio 1 [ 96.490574][ T4399] BTRFS info (device loop1): enabling ssd optimizations [ 96.516230][ T4399] BTRFS info (device loop1): allowing degraded mounts [ 96.907286][ T4399] BTRFS info (device loop1): using free space tree [ 97.148726][ T4412] loop2: detected capacity change from 0 to 32768 [ 97.362650][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 97.469215][ T4412] XFS (loop2): Mounting V5 Filesystem [ 97.509117][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.686204][ T4412] XFS (loop2): Ending clean mount [ 98.364759][ T4254] XFS (loop2): Unmounting Filesystem [ 98.735587][ T4473] loop1: detected capacity change from 0 to 128 [ 98.864384][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.881117][ T4473] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.093134][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 101.420138][ T4484] loop0: detected capacity change from 0 to 2048 [ 101.534351][ T4484] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.202119][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 103.714298][ T4493] loop2: detected capacity change from 0 to 2048 [ 103.738470][ T4493] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.774889][ T4493] NILFS (loop2): unrecognized mount option "&&ÞtBw}sZE—žò(ï`ióý(„×°\ƒ¼»¬ýÏôçõA‹QTœW£à|5DY;€±NÈ+pTãq˜g†àÐL§^ºôZñÅY­™Äæ±›‹DÛjtIû†žliÈFÎ'ñVlÐ_ÕòãÁq«©÷Ï€h;öi—ˆãžÁœ‘ -§æÀîC" [ 104.201018][ T4499] loop1: detected capacity change from 0 to 2048 [ 105.227775][ T4505] tty tty27: ldisc open failed (-12), clearing slot 26 [ 105.656049][ T4499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.746622][ T4536] ipt_ECN: cannot use operation on non-tcp rule [ 107.781149][ T4541] loop4: detected capacity change from 0 to 2048 [ 107.909362][ T4541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.265314][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 108.633743][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 109.208417][ T4554] loop0: detected capacity change from 0 to 8 [ 109.491383][ T4554] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.503978][ T4554] SQUASHFS error: Failed to read block 0x108: -5 [ 109.513378][ T4554] SQUASHFS error: Unable to read metadata cache entry [106] [ 109.527745][ T4554] SQUASHFS error: Unable to read inode 0x11f [ 111.128266][ T4577] loop3: detected capacity change from 0 to 128 [ 111.298238][ T4577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.312959][ T4577] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.184516][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 113.383724][ T4589] loop1: detected capacity change from 0 to 2048 [ 113.688955][ T4594] ipt_ECN: cannot use operation on non-tcp rule [ 113.772811][ T4589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.055354][ T4599] loop3: detected capacity change from 0 to 2048 [ 114.213352][ T4599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.902220][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 116.858488][ T4623] loop3: detected capacity change from 0 to 8 [ 116.968667][ T4623] SQUASHFS error: xz decompression failed, data probably corrupt [ 116.983678][ T4623] SQUASHFS error: Failed to read block 0x108: -5 [ 117.038741][ T4623] SQUASHFS error: Unable to read metadata cache entry [106] [ 117.089057][ T4623] SQUASHFS error: Unable to read inode 0x11f [ 117.204112][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 117.620130][ T4635] loop0: detected capacity change from 0 to 2048 [ 117.684023][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.010830][ T4643] ipt_ECN: cannot use operation on non-tcp rule [ 118.516411][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 118.880305][ T4654] loop2: detected capacity change from 0 to 128 [ 118.941130][ T4654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.962377][ T4654] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.172908][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 119.254203][ T4633] loop4: detected capacity change from 0 to 32768 [ 119.297447][ T4658] loop2: detected capacity change from 0 to 64 [ 119.498269][ T4633] XFS (loop4): Mounting V5 Filesystem [ 120.221493][ T4665] bridge0: port 3(syz_tun) entered blocking state [ 120.231676][ T4665] bridge0: port 3(syz_tun) entered disabled state [ 120.326987][ T4665] device syz_tun entered promiscuous mode [ 120.350713][ T4665] bridge0: port 3(syz_tun) entered blocking state [ 120.357782][ T4665] bridge0: port 3(syz_tun) entered forwarding state [ 120.479091][ T4633] XFS (loop4): Ending clean mount [ 120.491448][ T4671] loop1: detected capacity change from 0 to 2048 [ 120.582981][ T4257] XFS (loop4): Unmounting Filesystem [ 120.695677][ T4671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.805053][ T4690] loop4: detected capacity change from 0 to 8 [ 123.214477][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 123.668762][ T4690] SQUASHFS error: xz decompression failed, data probably corrupt [ 123.709508][ T4690] SQUASHFS error: Failed to read block 0x108: -5 [ 123.748975][ T4690] SQUASHFS error: Unable to read metadata cache entry [106] [ 123.798992][ T4690] SQUASHFS error: Unable to read inode 0x11f [ 123.945234][ T4701] loop1: detected capacity change from 0 to 2048 [ 124.467013][ T4701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.979315][ T4713] loop4: detected capacity change from 0 to 512 [ 125.009448][ T4713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.070970][ T4701] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.84: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.099415][ T4713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.108518][ T4713] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.128995][ T4701] EXT4-fs (loop1): Remounting filesystem read-only [ 125.129419][ T4597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 125.149874][ T4701] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.84: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.167572][ T4713] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.89: verity file corrupted; can't find descriptor [ 125.203784][ T4701] EXT4-fs (loop1): Remounting filesystem read-only [ 125.207120][ T4597] EXT4-fs (loop1): Remounting filesystem read-only [ 125.270613][ T4720] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.89: verity file corrupted; can't find descriptor [ 125.315008][ T4699] loop3: detected capacity change from 0 to 32768 [ 125.336439][ T4719] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.89: verity file corrupted; can't find descriptor [ 125.349707][ T4699] ======================================================= [ 125.349707][ T4699] WARNING: The mand mount option has been deprecated and [ 125.349707][ T4699] and is ignored by this kernel. Remove the mand [ 125.349707][ T4699] option from the mount to silence this warning. [ 125.349707][ T4699] ======================================================= [ 125.459029][ T4720] EXT4-fs (loop4): Remounting filesystem read-only [ 125.465997][ T4720] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 125.469726][ T4719] EXT4-fs (loop4): Remounting filesystem read-only [ 125.528141][ T4713] EXT4-fs (loop4): Remounting filesystem read-only [ 125.553358][ T4719] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 125.567873][ T4713] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 125.579108][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 125.707447][ T4710] loop0: detected capacity change from 0 to 32768 [ 125.729190][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.729190][ T4699] [ 125.763164][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.763164][ T4699] [ 125.773049][ T4710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.87 (4710) [ 125.785774][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.785774][ T4699] [ 125.797158][ T4727] loop1: detected capacity change from 0 to 2048 [ 125.813800][ T4728] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.813800][ T4728] [ 125.827665][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.880921][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.880921][ T4699] [ 125.929065][ T4728] ialloc: diAlloc returned -5! [ 125.979162][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 125.979162][ T4699] [ 126.032966][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 126.032966][ T4699] [ 126.034340][ T4710] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.043076][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 126.043076][ T4699] [ 126.062057][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 126.062057][ T4699] [ 126.072297][ T4699] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 126.072297][ T4699] [ 126.119180][ T4710] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 126.144987][ T4710] BTRFS info (device loop0): using free space tree [ 126.446630][ T4309] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 126.446630][ T4309] [ 126.462754][ T4710] BTRFS info (device loop0): enabling ssd optimizations [ 126.705575][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 126.865829][ T4263] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.306298][ T4762] loop3: detected capacity change from 0 to 2048 [ 127.324425][ T4713] sp0: Synchronizing with TNC [ 127.357959][ T4719] EXT4-fs warning (device loop4): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 127.374015][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.920123][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 129.374557][ T4774] loop1: detected capacity change from 0 to 8 [ 130.410112][ T4774] SQUASHFS error: xz decompression failed, data probably corrupt [ 130.417899][ T4774] SQUASHFS error: Failed to read block 0x108: -5 [ 130.445214][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 130.471310][ T4774] SQUASHFS error: Unable to read metadata cache entry [106] [ 130.478651][ T4774] SQUASHFS error: Unable to read inode 0x11f [ 130.795919][ T4797] mmap: syz.0.108 (4797) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.897077][ T4801] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 130.904122][ T4801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.961996][ T4801] vhci_hcd vhci_hcd.0: Device attached [ 131.208970][ T3638] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 131.245157][ T4807] loop3: detected capacity change from 0 to 2048 [ 131.319722][ T4303] vhci_hcd: vhci_device speed not set [ 131.560893][ T4303] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 131.694985][ T4807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.252965][ T3638] usb 2-1: config 0 has no interfaces? [ 132.261892][ T3638] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.274846][ T3638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.374549][ T3638] usb 2-1: config 0 descriptor?? [ 132.624143][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 132.667770][ T14] usb 2-1: USB disconnect, device number 3 [ 132.674591][ T4802] vhci_hcd: connection reset by peer [ 132.704418][ T11] vhci_hcd: stop threads [ 132.709883][ T11] vhci_hcd: release socket [ 132.715840][ T11] vhci_hcd: disconnect device [ 132.739961][ T4303] vhci_hcd: vhci_device speed not set [ 132.799750][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806552][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.012307][ T4824] loop0: detected capacity change from 0 to 2048 [ 133.952006][ T4824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.046826][ T4843] loop3: detected capacity change from 0 to 8 [ 135.153331][ T4843] SQUASHFS error: xz decompression failed, data probably corrupt [ 135.189451][ T4843] SQUASHFS error: Failed to read block 0x108: -5 [ 135.206175][ T4843] SQUASHFS error: Unable to read metadata cache entry [106] [ 135.224068][ T4843] SQUASHFS error: Unable to read inode 0x11f [ 136.397221][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 136.763118][ T4858] loop4: detected capacity change from 0 to 2048 [ 136.872433][ T4858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.666691][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 138.907294][ T4889] loop3: detected capacity change from 0 to 8 [ 138.995051][ T4889] SQUASHFS error: xz decompression failed, data probably corrupt [ 139.035047][ T4889] SQUASHFS error: Failed to read block 0x108: -5 [ 139.054504][ T4889] SQUASHFS error: Unable to read metadata cache entry [106] [ 139.064642][ T4889] SQUASHFS error: Unable to read inode 0x11f [ 139.086311][ T4893] loop2: detected capacity change from 0 to 2048 [ 139.321222][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.426077][ T4914] loop4: detected capacity change from 0 to 2048 [ 140.517247][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.556193][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 141.709874][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 143.330823][ T4947] loop1: detected capacity change from 0 to 8 [ 144.453593][ T4947] SQUASHFS error: xz decompression failed, data probably corrupt [ 144.489078][ T4947] SQUASHFS error: Failed to read block 0x108: -5 [ 144.512388][ T4947] SQUASHFS error: Unable to read metadata cache entry [106] [ 144.539030][ T4947] SQUASHFS error: Unable to read inode 0x11f [ 144.577378][ T4962] loop4: detected capacity change from 0 to 64 [ 144.664543][ T4960] loop3: detected capacity change from 0 to 2048 [ 144.944837][ T4960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.124331][ T4967] bridge0: port 3(syz_tun) entered blocking state [ 145.146329][ T4967] bridge0: port 3(syz_tun) entered disabled state [ 145.515342][ T4967] device syz_tun entered promiscuous mode [ 145.564004][ T4970] loop1: detected capacity change from 0 to 2048 [ 145.893183][ T4967] bridge0: port 3(syz_tun) entered blocking state [ 145.899785][ T4967] bridge0: port 3(syz_tun) entered forwarding state [ 145.942942][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 146.057515][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.327927][ T5018] loop2: detected capacity change from 0 to 2048 [ 150.525589][ T5018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.242406][ T5032] loop0: detected capacity change from 0 to 64 [ 151.390031][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 151.512424][ T5038] bridge0: port 3(syz_tun) entered blocking state [ 151.519363][ T5038] bridge0: port 3(syz_tun) entered disabled state [ 151.529400][ T5038] device syz_tun entered promiscuous mode [ 151.536544][ T5038] bridge0: port 3(syz_tun) entered blocking state [ 151.543524][ T5038] bridge0: port 3(syz_tun) entered forwarding state [ 151.844236][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 151.888612][ T5044] loop3: detected capacity change from 0 to 1024 [ 151.947811][ T5042] loop2: detected capacity change from 0 to 4096 [ 151.995353][ T5044] hfsplus: Filesystem is marked locked, mounting read-only. [ 152.077459][ T5044] hfsplus: failed to load root directory [ 152.222502][ T5042] loop2: detected capacity change from 0 to 764 [ 152.235590][ T5042] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 153.667067][ T5040] loop4: detected capacity change from 0 to 32768 [ 154.519827][ T5040] XFS (loop4): Mounting V5 Filesystem [ 154.828616][ T5040] XFS (loop4): Ending clean mount [ 154.866559][ T5040] XFS (loop4): Quotacheck needed: Please wait. [ 155.745961][ T5040] XFS (loop4): Quotacheck: Done. [ 155.811260][ T4257] XFS (loop4): Unmounting Filesystem [ 156.315144][ T5079] loop0: detected capacity change from 0 to 2048 [ 156.412639][ T5079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.897043][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 157.907019][ T5096] loop2: detected capacity change from 0 to 2048 [ 158.010463][ T5096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.277494][ T5112] loop4: detected capacity change from 0 to 64 [ 161.023337][ T5118] loop1: detected capacity change from 0 to 2048 [ 161.104583][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.015656][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 164.058396][ T5143] loop3: detected capacity change from 0 to 8 [ 164.807332][ T5150] Zero length message leads to an empty skb [ 164.955373][ T5143] SQUASHFS error: Failed to read block 0x106: -5 [ 164.980680][ T26] audit: type=1800 audit(1738500665.332:2): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.205" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 165.215137][ T5146] loop0: detected capacity change from 0 to 40427 [ 165.241002][ T5146] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 165.298983][ T5146] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.337029][ T5146] F2FS-fs (loop0): invalid crc value [ 165.516867][ T5146] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 165.555772][ T5146] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 165.587979][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 165.859265][ T5146] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.866924][ T5146] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.301235][ T5186] loop0: detected capacity change from 0 to 2048 [ 169.416878][ T5186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.617552][ T5195] loop1: detected capacity change from 0 to 2048 [ 169.784060][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 169.791380][ T5195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.227816][ T5207] loop0: detected capacity change from 0 to 64 [ 173.005000][ T5227] loop4: detected capacity change from 0 to 64 [ 174.346477][ T5232] loop0: detected capacity change from 0 to 16 [ 174.369206][ T5232] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.383836][ T5232] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.406376][ T5232] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 174.418939][ T5232] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 175.410444][ T5226] loop2: detected capacity change from 0 to 32768 [ 175.417890][ T5226] XFS: attr2 mount option is deprecated. [ 175.424565][ T5226] XFS: ikeep mount option is deprecated. [ 175.431566][ T5226] XFS: noikeep mount option is deprecated. [ 175.521050][ T5226] XFS (loop2): Mounting V5 Filesystem [ 175.567503][ T5244] syz.0.232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.649255][ T5226] XFS (loop2): Ending clean mount [ 175.668437][ T5245] loop0: detected capacity change from 0 to 512 [ 175.704106][ T5226] XFS (loop2): Quotacheck needed: Please wait. [ 175.939633][ T5226] XFS (loop2): Quotacheck: Done. [ 175.986925][ T5248] loop3: detected capacity change from 0 to 512 [ 176.075423][ T4254] XFS (loop2): Unmounting Filesystem [ 176.093479][ T5248] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.233: corrupted in-inode xattr [ 176.124876][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.124876][ T75] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 176.178312][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 176.184995][ T75] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 176.196629][ T5248] EXT4-fs (loop3): Remounting filesystem read-only [ 176.211562][ T5248] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.233: couldn't read orphan inode 15 (err -117) [ 176.225244][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.225244][ T75] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 176.249244][ T5245] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.256391][ T75] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 176.264949][ T5248] EXT4-fs (loop3): Remounting filesystem read-only [ 176.277502][ T5248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.287357][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.287357][ T75] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 176.331509][ T75] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 176.343042][ T5245] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.232: invalid block [ 176.358965][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.358965][ T75] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 176.367086][ T5245] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.232: couldn't read orphan inode 11 (err -117) [ 176.386603][ T75] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 176.407166][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.407166][ T75] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 176.413691][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.422382][ T75] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 176.439279][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.439279][ T75] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 176.453999][ T75] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 176.462948][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.462948][ T75] loop4: rw=1, sector=76, nr_sectors = 1 limit=64 [ 176.476954][ T75] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 176.498013][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.498013][ T75] loop4: rw=1, sector=77, nr_sectors = 1 limit=64 [ 176.513644][ T75] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 176.544605][ T75] kworker/u4:4: attempt to access beyond end of device [ 176.544605][ T75] loop4: rw=1, sector=78, nr_sectors = 4048 limit=64 [ 176.639013][ T4298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.858894][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 176.868352][ T4298] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 10 [ 176.893460][ T5258] loop1: detected capacity change from 0 to 2048 [ 176.911348][ T4298] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024 [ 176.937212][ T4298] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 176.947579][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.013679][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.150945][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 178.348975][ T14] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 178.519696][ T5275] Bluetooth: MGMT ver 1.22 [ 178.571908][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.599338][ T14] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.630956][ T14] usb 3-1: config 1 has no interface number 1 [ 178.646871][ T5272] loop1: detected capacity change from 0 to 4096 [ 178.653761][ T14] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.688537][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 178.707427][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.719624][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 178.729390][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.737641][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 178.746105][ T14] usb 3-1: Product: syz [ 178.750923][ T14] usb 3-1: Manufacturer: syz [ 178.756046][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 178.774871][ T14] usb 3-1: SerialNumber: syz [ 178.786441][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 178.830243][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 178.838216][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 178.847497][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 178.856422][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 178.868360][ T5272] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 179.109021][ T5278] loop4: detected capacity change from 0 to 64 [ 179.700508][ T4298] usb 4-1: string descriptor 0 read error: -71 [ 179.721253][ T4298] hub 4-1:32.0: USB hub found [ 179.736510][ T4298] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 179.904485][ T5277] syz.4.240 uses obsolete (PF_INET,SOCK_PACKET) [ 179.925546][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 180.238363][ T14] usb 3-1: USB disconnect, device number 2 [ 180.273643][ T4298] usb 4-1: USB disconnect, device number 2 [ 180.731233][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.124297][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 183.336793][ T5294] loop1: detected capacity change from 0 to 8 [ 183.429463][ T5294] Page size > filesystem block size (1024). This is currently not supported! [ 183.541794][ T5296] loop2: detected capacity change from 0 to 64 [ 185.378936][ T4298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.512143][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 185.568886][ T4298] usb 5-1: Using ep0 maxpacket: 8 [ 185.581446][ T4298] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 185.611042][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.624585][ T4298] usb 5-1: Product: syz [ 185.629298][ T4298] usb 5-1: Manufacturer: syz [ 185.634053][ T4298] usb 5-1: SerialNumber: syz [ 185.666852][ T4298] usb 5-1: config 0 descriptor?? [ 185.779887][ T5304] loop0: detected capacity change from 0 to 2048 [ 185.842840][ T5304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.931537][ T4298] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 185.981208][ T5310] loop2: detected capacity change from 0 to 2048 [ 186.123724][ T5300] loop1: detected capacity change from 0 to 32768 [ 186.237415][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.805377][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 186.832775][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 188.066596][ T4298] gspca_sunplus: reg_w_riv err -110 [ 188.094646][ T4298] sunplus: probe of 5-1:0.0 failed with error -110 [ 188.344863][ T4298] usb 5-1: USB disconnect, device number 2 [ 188.993412][ T5323] loop0: detected capacity change from 0 to 32768 [ 189.104613][ T5323] JBD2: Ignoring recovery information on journal [ 189.142776][ T5323] (syz.0.254,5323,1):ocfs2_clear_journal_error:1092 ERROR: File system error -33024 recorded in journal 0. [ 189.142806][ T5323] (syz.0.254,5323,1):ocfs2_clear_journal_error:1094 ERROR: File system on device loop0 needs checking. [ 189.146934][ T5323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 189.762140][ T5329] loop2: detected capacity change from 0 to 40427 [ 191.187544][ T5329] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 191.187595][ T5329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 191.210872][ T5329] F2FS-fs (loop2): invalid crc value [ 191.276859][ T5329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.646922][ T4263] ocfs2: Unmounting device (7,0) on (node local) [ 194.239588][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246068][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808264][ T5369] loop0: detected capacity change from 0 to 2048 [ 194.873427][ T5369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.894525][ T5371] loop3: detected capacity change from 0 to 2048 [ 195.015573][ T5358] loop4: detected capacity change from 0 to 40427 [ 195.017028][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.034226][ T5358] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 195.208897][ T5358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 195.238867][ T127] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 195.253871][ T5362] loop2: detected capacity change from 0 to 40427 [ 195.263194][ T5362] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 195.273068][ T5358] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.273582][ T5362] F2FS-fs (loop2): invalid crc value [ 195.612070][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 195.644865][ T5362] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.673951][ T5358] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 195.712673][ T5358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.838339][ T5362] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.908483][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 195.963272][ T26] audit: type=1804 audit(1738500696.322:3): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.263" name="/newroot/55/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 195.992930][ T26] audit: type=1804 audit(1738500696.352:4): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.263" name="/newroot/55/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 195.992937][ T127] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.040922][ T5362] syz.2.262: attempt to access beyond end of device [ 196.040922][ T5362] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 196.056108][ T127] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.074269][ T127] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.309032][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.323886][ T5373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.022388][ T4257] syz-executor: attempt to access beyond end of device [ 197.022388][ T4257] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.115760][ T5395] loop3: detected capacity change from 0 to 2048 [ 197.147238][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.156512][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.318131][ T5395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.116339][ T4299] usb 2-1: USB disconnect, device number 4 [ 198.296568][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 198.469213][ T4265] Bluetooth: hci5: command 0xfc11 tx timeout [ 198.475758][ T4252] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 198.673238][ T5413] loop4: detected capacity change from 0 to 512 [ 198.789763][ T5409] nbd3: detected capacity change from 0 to 10 [ 198.911031][ T5413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.949525][ T5413] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.956956][ T5409] block nbd3: shutting down sockets [ 198.996858][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.006638][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.016862][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.026353][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.037144][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.046390][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.054715][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.063902][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.072273][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.081647][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.090072][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.099473][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.107947][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.117174][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.125569][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.134694][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.143058][ T4327] ldm_validate_partition_table(): Disk read failed. [ 199.151679][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.161402][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.171763][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.181391][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.211886][ T4327] Dev nbd3: unable to read RDB block 0 [ 199.289382][ T4327] nbd3: unable to read partition table [ 199.295194][ T4327] nbd3: partition table beyond EOD, truncated [ 199.383547][ T5418] ldm_validate_partition_table(): Disk read failed. [ 199.426881][ T5418] Dev nbd3: unable to read RDB block 0 [ 199.462752][ T5418] nbd3: unable to read partition table [ 199.495683][ T5418] nbd3: partition table beyond EOD, truncated [ 199.514677][ T4327] ldm_validate_partition_table(): Disk read failed. [ 199.532826][ T4327] Dev nbd3: unable to read RDB block 0 [ 199.583212][ T4327] nbd3: unable to read partition table [ 199.594184][ T4327] nbd3: partition table beyond EOD, truncated [ 199.667839][ T4254] syz-executor: attempt to access beyond end of device [ 199.667839][ T4254] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 199.690910][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 201.320990][ T5439] loop3: detected capacity change from 0 to 2048 [ 201.370270][ T5441] loop4: detected capacity change from 0 to 2048 [ 201.383657][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.419836][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.429288][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 201.435879][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 201.442391][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 201.448439][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 201.454624][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 202.373388][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 202.763224][ T5456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.864504][ T5512] loop3: detected capacity change from 0 to 64 [ 211.490891][ T5457] syz.1.284 (5457): drop_caches: 2 [ 211.493250][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 212.961955][ T5523] loop2: detected capacity change from 0 to 2048 [ 213.097096][ T5523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.519415][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 213.724208][ T127] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.744413][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.769728][ T127] usb 4-1: Product: syz [ 213.774041][ T127] usb 4-1: Manufacturer: syz [ 213.778701][ T127] usb 4-1: SerialNumber: syz [ 213.827619][ T127] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 213.931941][ T127] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.417645][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 214.624394][ T5538] loop3: detected capacity change from 0 to 512 [ 214.681294][ T5538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 214.755734][ T5538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.818130][ T5538] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.321: bad orphan inode 131083 [ 214.831627][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.867437][ T4299] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 214.994840][ T5555] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.674145][ T127] usb 4-1: Service connection timeout for: 256 [ 215.786529][ T127] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 215.811405][ T5538] EXT4-fs (loop3): unmounting filesystem. [ 215.870538][ T127] ath9k_htc: Failed to initialize the device [ 215.878752][ T5558] loop4: detected capacity change from 0 to 64 [ 215.881173][ T4299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.081510][ T127] usb 4-1: ath9k_htc: USB layer deinitialized [ 216.095933][ T4299] usb 2-1: not running at top speed; connect to a high speed hub [ 216.115882][ T26] audit: type=1800 audit(1738500716.472:5): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 216.128126][ T4299] usb 2-1: config 2 has an invalid interface number: 140 but max is 0 [ 216.198947][ T4299] usb 2-1: config 2 has no interface number 0 [ 216.205236][ T4299] usb 2-1: config 2 interface 140 has no altsetting 0 [ 216.271415][ T4453] usb 4-1: USB disconnect, device number 3 [ 216.283457][ T4299] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=e9.89 [ 216.309803][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.354789][ T4299] usb 2-1: Product: syz [ 216.375058][ T4299] usb 2-1: Manufacturer: syz [ 216.395325][ T4299] usb 2-1: SerialNumber: syz [ 217.530727][ T4299] esd_usb 2-1:2.140: sending version message failed [ 217.539777][ T4299] esd_usb: probe of 2-1:2.140 failed with error -22 [ 217.579382][ T4299] usb 2-1: USB disconnect, device number 5 [ 217.750979][ T5574] loop0: detected capacity change from 0 to 1024 [ 218.468820][ T5578] loop4: detected capacity change from 0 to 8 [ 221.581798][ T5593] loop4: detected capacity change from 0 to 2048 [ 221.719912][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.273766][ T5596] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.104489][ T5619] loop1: detected capacity change from 0 to 64 [ 226.419787][ T3638] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 227.161860][ T3638] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.187662][ T3638] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.214556][ T5626] loop1: detected capacity change from 0 to 2048 [ 227.218323][ T3638] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.249603][ T3638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.286132][ T5613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.323033][ T5626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.563991][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.572746][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.703541][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 228.789303][ T4252] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 228.984982][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 229.212330][ T127] usb 4-1: USB disconnect, device number 4 [ 229.346289][ T5640] loop0: detected capacity change from 0 to 64 [ 230.564957][ T5639] loop4: detected capacity change from 0 to 32768 [ 230.576953][ T5645] loop2: detected capacity change from 0 to 2048 [ 230.638492][ T5639] JBD2: Ignoring recovery information on journal [ 230.699030][ T5639] (syz.4.335,5639,1):ocfs2_clear_journal_error:1092 ERROR: File system error -33024 recorded in journal 0. [ 230.710701][ T5639] (syz.4.335,5639,1):ocfs2_clear_journal_error:1094 ERROR: File system on device loop4 needs checking. [ 230.731750][ T5639] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 231.823506][ T5645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.128880][ T127] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 232.171924][ T4257] ocfs2: Unmounting device (7,4) on (node local) [ 232.355085][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 232.470657][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.511613][ T127] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.598277][ T5667] loop1: detected capacity change from 0 to 16 [ 232.621348][ T127] usb 4-1: config 1 has no interface number 1 [ 232.693426][ T5667] erofs: (device loop1): mounted with root inode @ nid 36. [ 232.723357][ T5667] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 232.736602][ T5667] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 232.747802][ T5667] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 232.894444][ T127] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.425885][ T127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.488987][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.223512][ T127] usb 4-1: Product: syz [ 235.228385][ T127] usb 4-1: Manufacturer: syz [ 235.233930][ T127] usb 4-1: SerialNumber: syz [ 236.475658][ T127] usb 4-1: USB disconnect, device number 5 [ 236.764936][ T5680] loop1: detected capacity change from 0 to 2048 [ 237.039777][ T5680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.855100][ T5706] loop2: detected capacity change from 0 to 2048 [ 237.981632][ T5703] loop0: detected capacity change from 0 to 64 [ 238.067811][ T5706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.026863][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 242.096532][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 242.622202][ T5751] loop4: detected capacity change from 0 to 2048 [ 242.658870][ T4758] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 242.697921][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.216872][ T4758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.311017][ T4758] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.410788][ T4758] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 243.438974][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.476081][ T4758] usb 2-1: SerialNumber: syz [ 243.503152][ T4758] usb 2-1: 0:2 : does not exist [ 243.576615][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 244.698834][ T5771] loop4: detected capacity change from 0 to 64 [ 248.768892][ T4523] blk_print_req_error: 40 callbacks suppressed [ 248.768912][ T4523] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.814835][ T4758] usb 2-1: USB disconnect, device number 6 [ 249.257237][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.486001][ T5786] loop4: detected capacity change from 0 to 2048 [ 249.886175][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.379609][ T4760] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 250.457501][ T5794] loop2: detected capacity change from 0 to 64 [ 251.869047][ T4760] usb 4-1: Using ep0 maxpacket: 8 [ 251.914848][ T4760] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 251.937142][ T4760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.068010][ T4760] usb 4-1: Product: syz [ 252.072278][ T4760] usb 4-1: Manufacturer: syz [ 252.076899][ T4760] usb 4-1: SerialNumber: syz [ 252.083533][ T4760] usb 4-1: config 0 descriptor?? [ 252.296621][ T4760] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 252.524129][ T5807] loop2: detected capacity change from 0 to 2048 [ 252.916495][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.775705][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 253.782603][ T4760] gspca_sunplus: reg_w_riv err -71 [ 253.787904][ T4760] sunplus: probe of 4-1:0.0 failed with error -71 [ 253.789704][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 253.829053][ T4760] usb 4-1: USB disconnect, device number 6 [ 254.553726][ T5829] loop0: detected capacity change from 0 to 64 [ 254.564877][ T5830] loop3: detected capacity change from 0 to 64 [ 254.814426][ T26] audit: type=1800 audit(1738500755.172:6): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.383" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 254.922721][ T4460] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 254.953142][ T4523] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.306681][ T4460] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.620528][ T4460] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.639789][ T4460] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 255.650273][ T4460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.658297][ T4460] usb 5-1: SerialNumber: syz [ 255.673445][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679824][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721363][ T4460] usb 5-1: 0:2 : does not exist [ 255.826000][ T5836] loop1: detected capacity change from 0 to 64 [ 256.059016][ T4327] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.567530][ T5844] loop3: detected capacity change from 0 to 8 [ 258.444535][ T4252] Bluetooth: hci4: command 0x0405 tx timeout [ 260.263428][ T4460] usb 5-1: USB disconnect, device number 3 [ 260.500180][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.214754][ T5863] loop4: detected capacity change from 0 to 64 [ 262.611236][ T5863] hfs: unable to parse mount options [ 262.798236][ T4523] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.218929][ T4460] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 263.439441][ T4460] usb 3-1: Using ep0 maxpacket: 8 [ 263.454033][ T4460] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.659345][ T4460] usb 3-1: config 179 has no interface number 0 [ 264.095086][ T4460] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 264.115328][ T4460] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 264.522208][ T5881] loop4: detected capacity change from 0 to 8 [ 265.063311][ T4460] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.631019][ T4460] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.647937][ T4460] usb 3-1: config 179 interface 65 has no altsetting 0 [ 265.655308][ T4460] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 265.665290][ T4460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.679165][ T5870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.157122][ T5885] loop2: detected capacity change from 0 to 64 [ 267.011306][ T4460] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 267.043078][ T4460] usb 3-1: USB disconnect, device number 3 [ 267.043135][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.058594][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.068445][ T4460] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 267.110255][ T4327] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.551386][ T5893] loop4: detected capacity change from 0 to 64 [ 267.612141][ T5896] loop0: detected capacity change from 0 to 64 [ 267.648999][ T4327] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.939167][ T4758] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 267.959389][ T5899] loop4: detected capacity change from 0 to 2048 [ 268.028533][ T5901] loop3: detected capacity change from 0 to 2048 [ 268.147563][ T4758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.187836][ T4758] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.218691][ T4758] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 268.235842][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.244486][ T4758] usb 2-1: SerialNumber: syz [ 268.263830][ T4758] usb 2-1: 0:2 : does not exist [ 268.298569][ T5891] syz.2.404 (5891): drop_caches: 2 [ 268.385878][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 268.396246][ T5899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.043256][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 270.353497][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 270.827533][ T4758] usb 2-1: USB disconnect, device number 7 [ 270.922100][ T5918] loop3: detected capacity change from 0 to 64 [ 270.939692][ T5918] hfs: unable to parse mount options [ 271.257193][ T4525] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.344419][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.370666][ T5923] device bridge1 entered promiscuous mode [ 271.999372][ T5926] capability: warning: `syz.2.414' uses deprecated v2 capabilities in a way that may be insecure [ 272.342585][ T5930] loop3: detected capacity change from 0 to 64 [ 272.429305][ T4327] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.609541][ T5940] loop4: detected capacity change from 0 to 64 [ 272.630994][ T5942] loop3: detected capacity change from 0 to 64 [ 272.967001][ T5945] loop3: detected capacity change from 0 to 2048 [ 273.102984][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 273.977529][ T5959] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 274.065745][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 277.008871][ T4299] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 277.226578][ T4299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.317888][ T4299] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.533841][ T5983] loop2: detected capacity change from 0 to 64 [ 277.547665][ T5979] loop3: detected capacity change from 0 to 64 [ 278.878318][ T4299] usb 5-1: string descriptor 0 read error: -71 [ 278.888938][ T4299] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 278.899620][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.130382][ T4299] usb 5-1: can't set config #1, error -71 [ 279.145389][ T4299] usb 5-1: USB disconnect, device number 4 [ 281.847653][ T5996] loop4: detected capacity change from 0 to 2048 [ 283.442006][ T6010] loop0: detected capacity change from 0 to 8 [ 283.726324][ T5996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.035691][ T6013] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 284.243204][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 284.947437][ T6030] loop3: detected capacity change from 0 to 64 [ 285.793908][ T4608] bridge0: port 3(syz_tun) entered disabled state [ 286.108925][ T4455] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 286.169081][ T4608] device syz_tun left promiscuous mode [ 286.327794][ T4608] bridge0: port 3(syz_tun) entered disabled state [ 286.434168][ T4455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.445044][ T4455] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.788236][ T4455] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 286.978714][ T4455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.045910][ T4455] usb 3-1: SerialNumber: syz [ 288.166381][ T6045] loop3: detected capacity change from 0 to 64 [ 288.633058][ T4310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.755766][ T4455] usb 3-1: can't set config #1, error -71 [ 288.763362][ T4455] usb 3-1: USB disconnect, device number 4 [ 289.101367][ T6054] loop2: detected capacity change from 0 to 2048 [ 289.649651][ T4310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.691552][ T6057] loop4: detected capacity change from 0 to 8 [ 289.697812][ T6062] loop1: detected capacity change from 0 to 512 [ 289.707654][ T6054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 289.717134][ T6062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.914848][ T6062] EXT4-fs (loop1): 1 truncate cleaned up [ 290.379102][ T6062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 290.516722][ T26] audit: type=1800 audit(1738500790.873:7): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.457" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 290.548251][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 291.192807][ T4310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.411184][ T4257] bridge0: port 3(syz_tun) entered disabled state [ 291.571613][ T4257] device syz_tun left promiscuous mode [ 291.593630][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 291.625117][ T4257] bridge0: port 3(syz_tun) entered disabled state [ 291.950964][ T4310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.148001][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.235519][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.249867][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.321111][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.333493][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.343706][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.936607][ T6099] loop2: detected capacity change from 0 to 2048 [ 293.999572][ T6099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 294.390076][ T6112] loop1: detected capacity change from 0 to 8 [ 295.094069][ T6093] chnl_net:caif_netlink_parms(): no params data found [ 295.102342][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 295.417846][ T6123] loop2: detected capacity change from 0 to 64 [ 295.439127][ T4252] Bluetooth: hci3: command 0x0409 tx timeout [ 295.465196][ T6123] hfs: unable to parse mount options [ 295.977919][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.988598][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.997773][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.007041][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.016229][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.024784][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.255070][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.274594][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.295960][ T6093] device bridge_slave_0 entered promiscuous mode [ 296.340270][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.347441][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.361832][ T6093] device bridge_slave_1 entered promiscuous mode [ 298.784149][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 298.791112][ T4252] Bluetooth: hci0: command 0x0409 tx timeout [ 298.830525][ T6093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.855427][ T6093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.215682][ T6093] team0: Port device team_slave_0 added [ 299.243954][ T6093] team0: Port device team_slave_1 added [ 299.254856][ T6156] loop2: detected capacity change from 0 to 2048 [ 299.316169][ T6156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 300.103519][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.119460][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.210200][ T6093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.270845][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.290125][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.298392][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.308345][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.316629][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 300.323224][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 300.340137][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.560502][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.567582][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.440810][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 303.448052][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 303.448817][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 303.474698][ T6093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.782228][ T6189] loop2: detected capacity change from 0 to 64 [ 303.806488][ T6189] hfs: unable to parse mount options [ 303.951045][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 303.983616][ T6093] device hsr_slave_0 entered promiscuous mode [ 303.990809][ T6093] device hsr_slave_1 entered promiscuous mode [ 303.998306][ T6093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.008142][ T6093] Cannot create hsr debugfs directory [ 304.028890][ T6185] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.508988][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 305.516606][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 305.524441][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 305.678946][ T4302] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 305.808535][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.815833][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.824409][ T6133] device bridge_slave_0 entered promiscuous mode [ 305.855336][ T4310] device hsr_slave_0 left promiscuous mode [ 305.867240][ T4310] device hsr_slave_1 left promiscuous mode [ 305.884149][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.898100][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.916841][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.929799][ T4302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.945453][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.966185][ T4302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.000038][ T4310] device bridge_slave_1 left promiscuous mode [ 306.009090][ T4302] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 306.022227][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.048104][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.087428][ T4302] usb 4-1: SerialNumber: syz [ 306.106984][ T4310] device bridge_slave_0 left promiscuous mode [ 306.127974][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.152986][ T4302] usb 4-1: 0:2 : does not exist [ 306.240247][ T4310] device veth1_macvtap left promiscuous mode [ 306.246951][ T4310] device veth0_macvtap left promiscuous mode [ 306.253204][ T4310] device veth1_vlan left promiscuous mode [ 306.259755][ T4310] device veth0_vlan left promiscuous mode [ 307.240423][ T4302] usb 4-1: USB disconnect, device number 7 [ 308.085128][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 308.091485][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 308.179141][ T6228] loop2: detected capacity change from 0 to 2048 [ 308.199717][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.141229][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 311.350624][ T6242] loop3: detected capacity change from 0 to 8 [ 312.437448][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 314.347683][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 314.966774][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 315.182998][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.293160][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.190197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640231][ T6262] loop3: detected capacity change from 0 to 2048 [ 317.673202][ T6262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 318.581979][ T4310] bond0 (unregistering): Released all slaves [ 318.658052][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 318.793256][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.807645][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.817803][ T6133] device bridge_slave_1 entered promiscuous mode [ 318.928215][ T4303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 319.237095][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.470493][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.720957][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 319.742124][ T6133] team0: Port device team_slave_0 added [ 319.762380][ T4303] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.790855][ T4303] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.809065][ T6133] team0: Port device team_slave_1 added [ 319.827471][ T4303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.839907][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.882367][ T6267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.958499][ T6093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.056622][ T6093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.077411][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.084720][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.111398][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.136217][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.147445][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.219563][ T6093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.249512][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.256658][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.285127][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.308928][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.316159][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.366720][ T6170] device bridge_slave_0 entered promiscuous mode [ 320.375769][ T6093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.404570][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.427289][ T4301] usb 3-1: USB disconnect, device number 5 [ 320.431557][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.448090][ T6170] device bridge_slave_1 entered promiscuous mode [ 320.621895][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.662569][ T4310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.688598][ T6133] device hsr_slave_0 entered promiscuous mode [ 320.705521][ T6133] device hsr_slave_1 entered promiscuous mode [ 320.718118][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.736046][ T6133] Cannot create hsr debugfs directory [ 320.772162][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.826287][ T6170] team0: Port device team_slave_0 added [ 320.859562][ T4310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.884478][ T6170] team0: Port device team_slave_1 added [ 320.975800][ T4310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.054330][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.067366][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.102990][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.120251][ T4265] Bluetooth: hci5: command 0xfc11 tx timeout [ 321.128695][ T4255] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 321.384641][ T6297] loop2: detected capacity change from 0 to 8 [ 322.303552][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.317284][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.354519][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.446805][ T6170] device hsr_slave_0 entered promiscuous mode [ 322.463061][ T6170] device hsr_slave_1 entered promiscuous mode [ 322.478235][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.495020][ T6170] Cannot create hsr debugfs directory [ 322.851399][ T4310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.063464][ T6093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.317897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.327325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.007155][ T6093] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.049311][ T6309] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 325.515166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.629308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.661501][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.669210][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.709767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.757964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.767070][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.774287][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.996554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.118193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.213837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.380348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.402199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.437800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.472230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.498552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.659313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.707505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.744110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.786547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.893785][ T6324] loop2: detected capacity change from 0 to 2048 [ 326.918126][ T6170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.054251][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.065286][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 328.078819][ T6170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 328.147238][ T6170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 328.195799][ T6133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.252816][ T6338] loop3: detected capacity change from 0 to 64 [ 328.288131][ T6338] hfs: unable to parse mount options [ 328.297503][ T6170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 328.370844][ T6133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.560469][ T4310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.622078][ T4454] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 328.623765][ T6133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.838794][ T4454] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.872895][ T4454] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.917465][ T4454] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.961004][ T6348] loop3: detected capacity change from 0 to 64 [ 328.962046][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.299836][ T6340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.314124][ T4310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.370581][ T6133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.528070][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.537235][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.236945][ T4310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.295339][ T6093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.321770][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.330605][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.386386][ T4310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.522233][ T4299] usb 3-1: USB disconnect, device number 6 [ 330.681306][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.723638][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.775483][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.786974][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.814795][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.851271][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.871218][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.880379][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.926942][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.939506][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.946750][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.988686][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.045668][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.224577][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.248273][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.322669][ T6374] loop3: detected capacity change from 0 to 8 [ 332.452572][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.459782][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.602013][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.460546][ T6185] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.555028][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.570353][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.598163][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.635441][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.648443][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.662020][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.670704][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.679718][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.688614][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.697398][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.704662][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.879280][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.889708][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.920914][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.953565][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.978268][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.985506][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.003350][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.017267][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.045766][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.103624][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.141363][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.150638][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.160075][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.169829][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.179819][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.189266][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.213473][ T6170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.221752][ T6394] loop3: detected capacity change from 0 to 2048 [ 335.233626][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.244718][ T6093] device veth0_vlan entered promiscuous mode [ 335.290662][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.442438][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.457310][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.468611][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.487934][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.496899][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.562923][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.616524][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.684779][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.743357][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.046785][ T6093] device veth1_vlan entered promiscuous mode [ 336.205795][ T6093] device veth0_macvtap entered promiscuous mode [ 336.227314][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 336.237654][ T6133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.297771][ T6402] loop2: detected capacity change from 0 to 2048 [ 336.363757][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.373684][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.375493][ T6402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 336.413939][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.473881][ T6407] loop3: detected capacity change from 0 to 64 [ 336.489739][ T6407] hfs: unable to parse mount options [ 336.600676][ T6093] device veth1_macvtap entered promiscuous mode [ 336.621577][ T6185] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.012776][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.320570][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.331143][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.349271][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.371596][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.382006][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.383109][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 337.399632][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.418911][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.478850][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.559431][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.693757][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.733182][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.756184][ T6423] loop2: detected capacity change from 0 to 2048 [ 337.800127][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.830618][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.847639][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.858496][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.868550][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.879783][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.888068][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 337.891311][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.912631][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.984786][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.064508][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.120320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.142500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.160192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.167857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.737091][ T6093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.778327][ T6093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.787509][ T6093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.796356][ T6093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.807570][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 339.020050][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.028351][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.060423][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.245250][ T6455] loop2: detected capacity change from 0 to 8 [ 342.129523][ T6133] device veth0_vlan entered promiscuous mode [ 342.145267][ T6133] device veth1_vlan entered promiscuous mode [ 342.177770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.195186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.207269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.223583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.238051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.254227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 342.268368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.291457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.828440][ T6468] loop2: detected capacity change from 0 to 2048 [ 343.008503][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.038466][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.065874][ T6468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.085359][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 344.231599][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.244482][ T6133] device veth0_macvtap entered promiscuous mode [ 344.278840][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.294153][ T6133] device veth1_macvtap entered promiscuous mode [ 344.612551][ T6487] loop2: detected capacity change from 0 to 8 [ 346.147675][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.359695][ T6488] loop3: detected capacity change from 0 to 64 [ 346.766653][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.786352][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.798620][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.811383][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.834842][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.884989][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.915930][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.931544][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.946830][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.968416][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.981924][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.003830][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.012855][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.023847][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.033443][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.056772][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.072327][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.082855][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.095431][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.105810][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.120694][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.131133][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.142428][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.157269][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.168001][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.180826][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.188357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.208094][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.217454][ T4302] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 347.234417][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.499970][ T4302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.505066][ T6133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.518828][ T4302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.536332][ T6133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.546541][ T4302] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 347.556531][ T6133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.566763][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.575595][ T6133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.586854][ T4302] usb 4-1: SerialNumber: syz [ 347.604493][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.612893][ T4302] usb 4-1: 0:2 : does not exist [ 347.624619][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.055335][ T6517] loop5: detected capacity change from 0 to 64 [ 350.241470][ T6188] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.718037][ T4302] usb 4-1: USB disconnect, device number 8 [ 350.795492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.833322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.895446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.928481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.961078][ T6528] loop3: detected capacity change from 0 to 2048 [ 351.037040][ T6528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 351.057597][ T4310] device hsr_slave_0 left promiscuous mode [ 351.068699][ T4310] device hsr_slave_1 left promiscuous mode [ 351.076760][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.084554][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.093043][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.101325][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.740890][ T4310] device bridge_slave_1 left promiscuous mode [ 351.747269][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.819401][ T4310] device bridge_slave_0 left promiscuous mode [ 351.825725][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.868171][ T4310] device hsr_slave_0 left promiscuous mode [ 351.876454][ T4310] device hsr_slave_1 left promiscuous mode [ 351.895452][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.898177][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 351.924240][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.006731][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.023924][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.037385][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.054388][ T4310] device bridge_slave_1 left promiscuous mode [ 352.066885][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.093068][ T4310] device bridge_slave_0 left promiscuous mode [ 352.099688][ T127] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 352.119207][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.201077][ T4310] device veth1_macvtap left promiscuous mode [ 352.208573][ T4310] device veth0_macvtap left promiscuous mode [ 352.215253][ T4310] device veth1_vlan left promiscuous mode [ 352.222857][ T4310] device veth0_vlan left promiscuous mode [ 352.231115][ T4310] device veth1_macvtap left promiscuous mode [ 352.237482][ T4310] device veth0_macvtap left promiscuous mode [ 352.314690][ T6543] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.365062][ T4310] device veth1_vlan left promiscuous mode [ 352.413955][ T4310] device veth0_vlan left promiscuous mode [ 353.062170][ T127] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.080699][ T127] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 353.091748][ T127] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.101504][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.130318][ T6539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.350408][ T4255] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 353.817381][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.828995][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.600564][ T3638] usb 3-1: USB disconnect, device number 7 [ 356.460325][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.472048][ T4265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.480342][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.510149][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.517822][ T4265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.525641][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.057644][ T6571] loop5: detected capacity change from 0 to 64 [ 357.237474][ T3638] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 357.806402][ T6185] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.241105][ T3638] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.256099][ T3638] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.299512][ T3638] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 358.327114][ T3638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.339869][ T3638] usb 4-1: SerialNumber: syz [ 358.344733][ T6576] loop5: detected capacity change from 0 to 2048 [ 358.365459][ T3638] usb 4-1: 0:2 : does not exist [ 358.448993][ T6576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 358.636876][ T4255] Bluetooth: hci5: command 0x0409 tx timeout [ 358.682331][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 359.419115][ T6093] EXT4-fs (loop5): unmounting filesystem. [ 359.829846][ T4265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.840064][ T4265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.855170][ T4265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.864353][ T4265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.873847][ T4265] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.881194][ T4265] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.916758][ T3638] usb 4-1: USB disconnect, device number 9 [ 361.442857][ T4255] Bluetooth: hci5: command 0x041b tx timeout [ 361.460223][ T6590] loop2: detected capacity change from 0 to 8 [ 362.439843][ T4255] Bluetooth: hci6: command 0x0409 tx timeout [ 363.111650][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 363.309883][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.675296][ T4255] Bluetooth: hci5: command 0x040f tx timeout [ 365.436758][ T4255] Bluetooth: hci6: command 0x041b tx timeout [ 365.596590][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.788520][ T4252] Bluetooth: hci5: command 0x0419 tx timeout [ 366.007290][ T6605] loop5: detected capacity change from 0 to 8 [ 367.509066][ T4252] Bluetooth: hci6: command 0x040f tx timeout [ 368.243997][ T4252] Bluetooth: hci7: command 0xfc11 tx timeout [ 368.244987][ T4265] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 368.752930][ T6615] loop3: detected capacity change from 0 to 64 [ 369.609282][ T4265] Bluetooth: hci6: command 0x0419 tx timeout [ 369.958996][ T6619] loop2: detected capacity change from 0 to 2048 [ 370.189878][ T6619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 371.993738][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 372.505287][ T6638] loop2: detected capacity change from 0 to 8 [ 374.272959][ T127] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 377.029966][ T6642] loop5: detected capacity change from 0 to 164 [ 378.301799][ T4310] bond0 (unregistering): Released all slaves [ 378.769738][ T6658] loop5: detected capacity change from 0 to 8 [ 379.389159][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.395577][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.439276][ T4252] Bluetooth: hci7: command 0xfc11 tx timeout [ 380.447905][ T4265] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 381.185167][ T6668] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 382.217661][ T6665] loop2: detected capacity change from 0 to 32768 [ 382.251638][ T127] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.283685][ T6665] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 382.350769][ T26] audit: type=1800 audit(1738500882.713:8): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 382.398059][ T26] audit: type=1800 audit(1738500882.753:9): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 382.438114][ T26] audit: type=1800 audit(1738500882.793:10): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 382.458693][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.473286][ T127] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.499097][ T127] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.509559][ T127] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.518895][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.556582][ T6670] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 382.581017][ T6665] [ 382.583473][ T6665] ====================================================== [ 382.590502][ T6665] WARNING: possible circular locking dependency detected [ 382.597551][ T6665] 6.1.128-syzkaller #0 Not tainted [ 382.602798][ T6665] ------------------------------------------------------ [ 382.609811][ T6665] syz.2.569/6665 is trying to acquire lock: [ 382.615801][ T6665] ffff88807e6944d8 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xa1/0x110 [ 382.624694][ T6665] [ 382.624694][ T6665] but task is already holding lock: [ 382.632059][ T6665] ffff8880767e3f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x36f/0xf80 [ 382.641220][ T6665] [ 382.641220][ T6665] which lock already depends on the new lock. [ 382.641220][ T6665] [ 382.651737][ T6665] [ 382.651737][ T6665] the existing dependency chain (in reverse order) is: [ 382.660841][ T6665] [ 382.660841][ T6665] -> #2 (&oi->ip_alloc_sem){++++}-{3:3}: [ 382.668670][ T6665] lock_acquire+0x1f8/0x5a0 [ 382.673715][ T6665] down_write+0x36/0x60 [ 382.678412][ T6665] ocfs2_page_mkwrite+0x340/0xea0 [ 382.683974][ T6665] do_page_mkwrite+0x1a1/0x5f0 [ 382.689287][ T6665] handle_mm_fault+0x22eb/0x5340 [ 382.694784][ T6665] exc_page_fault+0x26f/0x620 [ 382.700113][ T6665] asm_exc_page_fault+0x22/0x30 [ 382.705506][ T6665] __put_user_nocheck_4+0x3/0x11 [ 382.711066][ T6665] __se_sys_getgroups+0x1d4/0x280 [ 382.716622][ T6665] do_syscall_64+0x3b/0xb0 [ 382.721570][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.728095][ T6665] [ 382.728095][ T6665] -> #1 (sb_pagefaults#3){.+.+}-{0:0}: [ 382.735933][ T6665] lock_acquire+0x1f8/0x5a0 [ 382.740972][ T6665] ocfs2_page_mkwrite+0x21e/0xea0 [ 382.746525][ T6665] do_page_mkwrite+0x1a1/0x5f0 [ 382.751836][ T6665] handle_mm_fault+0x22eb/0x5340 [ 382.757329][ T6665] exc_page_fault+0x26f/0x620 [ 382.762551][ T6665] asm_exc_page_fault+0x22/0x30 [ 382.767942][ T6665] __put_user_nocheck_4+0x3/0x11 [ 382.773410][ T6665] __se_sys_getgroups+0x1d4/0x280 [ 382.778973][ T6665] do_syscall_64+0x3b/0xb0 [ 382.784185][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.790706][ T6665] [ 382.790706][ T6665] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 382.798294][ T6665] validate_chain+0x1661/0x5950 [ 382.803674][ T6665] __lock_acquire+0x125b/0x1f80 [ 382.809064][ T6665] lock_acquire+0x1f8/0x5a0 [ 382.814096][ T6665] __might_fault+0xbd/0x110 [ 382.819212][ T6665] _copy_to_user+0x26/0x130 [ 382.824251][ T6665] fiemap_fill_next_extent+0x231/0x410 [ 382.830237][ T6665] ocfs2_fiemap+0x9e9/0xf80 [ 382.835279][ T6665] do_vfs_ioctl+0x18e9/0x2a90 [ 382.840481][ T6665] __se_sys_ioctl+0x81/0x160 [ 382.845609][ T6665] do_syscall_64+0x3b/0xb0 [ 382.850739][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.857186][ T6665] [ 382.857186][ T6665] other info that might help us debug this: [ 382.857186][ T6665] [ 382.867456][ T6665] Chain exists of: [ 382.867456][ T6665] &mm->mmap_lock --> sb_pagefaults#3 --> &oi->ip_alloc_sem [ 382.867456][ T6665] [ 382.880718][ T6665] Possible unsafe locking scenario: [ 382.880718][ T6665] [ 382.888182][ T6665] CPU0 CPU1 [ 382.893552][ T6665] ---- ---- [ 382.899196][ T6665] lock(&oi->ip_alloc_sem); [ 382.903819][ T6665] lock(sb_pagefaults#3); [ 382.910862][ T6665] lock(&oi->ip_alloc_sem); [ 382.917980][ T6665] lock(&mm->mmap_lock); [ 382.922338][ T6665] [ 382.922338][ T6665] *** DEADLOCK *** [ 382.922338][ T6665] [ 382.930511][ T6665] 1 lock held by syz.2.569/6665: [ 382.935445][ T6665] #0: ffff8880767e3f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x36f/0xf80 [ 382.945236][ T6665] [ 382.945236][ T6665] stack backtrace: [ 382.951245][ T6665] CPU: 0 PID: 6665 Comm: syz.2.569 Not tainted 6.1.128-syzkaller #0 [ 382.959235][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 382.969299][ T6665] Call Trace: [ 382.972581][ T6665] [ 382.975513][ T6665] dump_stack_lvl+0x1e3/0x2cb [ 382.980212][ T6665] ? nf_tcp_handle_invalid+0x642/0x642 [ 382.985698][ T6665] ? print_circular_bug+0x12b/0x1a0 [ 382.990932][ T6665] check_noncircular+0x2fa/0x3b0 [ 382.995933][ T6665] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 383.002475][ T6665] ? add_chain_block+0x850/0x850 [ 383.007424][ T6665] ? lockdep_lock+0x11f/0x2a0 [ 383.012211][ T6665] ? lockdep_unlock+0x165/0x300 [ 383.017075][ T6665] ? lockdep_lock+0x2a0/0x2a0 [ 383.021765][ T6665] ? _find_first_zero_bit+0xd0/0x100 [ 383.027065][ T6665] validate_chain+0x1661/0x5950 [ 383.031929][ T6665] ? reacquire_held_locks+0x660/0x660 [ 383.037303][ T6665] ? __getblk_gfp+0x50/0xa20 [ 383.041893][ T6665] ? reacquire_held_locks+0x660/0x660 [ 383.047268][ T6665] ? rcu_is_watching+0x11/0xb0 [ 383.052032][ T6665] ? ocfs2_read_blocks+0x126a/0x16c0 [ 383.057329][ T6665] ? mark_lock+0x9a/0x340 [ 383.061682][ T6665] __lock_acquire+0x125b/0x1f80 [ 383.066561][ T6665] lock_acquire+0x1f8/0x5a0 [ 383.071257][ T6665] ? __might_fault+0xa1/0x110 [ 383.075945][ T6665] ? read_lock_is_recursive+0x10/0x10 [ 383.081330][ T6665] ? __might_sleep+0xb0/0xb0 [ 383.085941][ T6665] ? __might_sleep+0xb0/0xb0 [ 383.090538][ T6665] ? is_bpf_text_address+0x22/0x2a0 [ 383.095748][ T6665] ? __might_fault+0xa1/0x110 [ 383.100480][ T6665] __might_fault+0xbd/0x110 [ 383.104996][ T6665] ? __might_fault+0xa1/0x110 [ 383.109678][ T6665] _copy_to_user+0x26/0x130 [ 383.114197][ T6665] fiemap_fill_next_extent+0x231/0x410 [ 383.119766][ T6665] ? vfs_ioctl+0xc0/0xc0 [ 383.124186][ T6665] ? __lock_acquire+0x125b/0x1f80 [ 383.129225][ T6665] ? fiemap_prep+0x19a/0x240 [ 383.133820][ T6665] ocfs2_fiemap+0x9e9/0xf80 [ 383.138422][ T6665] ? ocfs2_extent_map_get_blocks+0x7d0/0x7d0 [ 383.144405][ T6665] ? __might_fault+0xa1/0x110 [ 383.149099][ T6665] ? __might_fault+0xbd/0x110 [ 383.153784][ T6665] ? ocfs2_extent_map_get_blocks+0x7d0/0x7d0 [ 383.159770][ T6665] do_vfs_ioctl+0x18e9/0x2a90 [ 383.164453][ T6665] ? __x64_compat_sys_ioctl+0x80/0x80 [ 383.169834][ T6665] ? __lock_acquire+0x1f80/0x1f80 [ 383.174879][ T6665] ? lockdep_hardirqs_on+0x94/0x130 [ 383.180125][ T6665] ? __kmem_cache_free+0x25c/0x3c0 [ 383.185248][ T6665] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 383.190885][ T6665] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 383.196522][ T6665] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 383.202158][ T6665] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 383.207659][ T6665] ? __fget_files+0x28/0x4a0 [ 383.212452][ T6665] ? __fget_files+0x28/0x4a0 [ 383.217046][ T6665] ? __fget_files+0x28/0x4a0 [ 383.221639][ T6665] ? bpf_lsm_file_ioctl+0x5/0x10 [ 383.226579][ T6665] ? security_file_ioctl+0x7d/0xa0 [ 383.231692][ T6665] __se_sys_ioctl+0x81/0x160 [ 383.236284][ T6665] do_syscall_64+0x3b/0xb0 [ 383.240748][ T6665] ? clear_bhb_loop+0x45/0xa0 [ 383.245428][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.251337][ T6665] RIP: 0033:0x7f8a7bb8cda9 [ 383.255770][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.275560][ T6665] RSP: 002b:00007f8a7ca82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.283984][ T6665] RAX: ffffffffffffffda RBX: 00007f8a7bda5fa0 RCX: 00007f8a7bb8cda9 [ 383.292049][ T6665] RDX: 0000000020000280 RSI: 00000000c020660b RDI: 0000000000000004 [ 383.300022][ T6665] RBP: 00007f8a7bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.308014][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.315991][ T6665] R13: 0000000000000000 R14: 00007f8a7bda5fa0 R15: 00007ffcc1fafae8 [ 383.323977][ T6665] [ 383.357236][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.365849][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.796045][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 383.949847][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 384.002745][ T4459] usb 6-1: USB disconnect, device number 3 [ 384.029786][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 384.075893][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.120993][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.582792][ T4310] bond0 (unregistering): Released all slaves [ 384.659088][ T6170] device veth0_vlan entered promiscuous mode [ 385.104646][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 385.215126][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 385.310183][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.317386][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.333509][ T6561] device bridge_slave_0 entered promiscuous mode [ 385.350731][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.357979][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.367184][ T6583] device bridge_slave_0 entered promiscuous mode [ 385.376444][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.384609][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.393180][ T6561] device bridge_slave_1 entered promiscuous mode [ 385.402197][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.409770][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.418385][ T6583] device bridge_slave_1 entered promiscuous mode [ 385.450917][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.497308][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.510187][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.551583][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.582251][ T6561] team0: Port device team_slave_0 added [ 385.625301][ T6561] team0: Port device team_slave_1 added [ 385.679850][ T6583] team0: Port device team_slave_0 added [ 385.689852][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.696835][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.723181][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.735433][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.742659][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.769778][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.796107][ T6583] team0: Port device team_slave_1 added [ 385.852104][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.861696][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.888769][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.902093][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.909542][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.936193][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.951811][ T6561] device hsr_slave_0 entered promiscuous mode [ 385.959616][ T6561] device hsr_slave_1 entered promiscuous mode [ 385.966822][ T6561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.976747][ T6561] Cannot create hsr debugfs directory [ 386.038903][ T6583] device hsr_slave_0 entered promiscuous mode [ 386.046083][ T6583] device hsr_slave_1 entered promiscuous mode [ 386.053318][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.061722][ T6583] Cannot create hsr debugfs directory [ 386.207652][ T6561] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.293890][ T6561] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.384308][ T6561] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.489505][ T6561] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.201784][ T4310] device hsr_slave_0 left promiscuous mode [ 387.208222][ T4310] device hsr_slave_1 left promiscuous mode [ 387.215076][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.223964][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.235087][ T4310] device bridge_slave_1 left promiscuous mode [ 387.242016][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.252970][ T4310] device bridge_slave_0 left promiscuous mode [ 387.260689][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.274336][ T4310] device hsr_slave_0 left promiscuous mode [ 387.281064][ T4310] device hsr_slave_1 left promiscuous mode [ 387.287441][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.295351][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.303369][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.310927][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.318583][ T4310] device bridge_slave_1 left promiscuous mode [ 387.324853][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.333024][ T4310] device bridge_slave_0 left promiscuous mode [ 387.339444][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.351694][ T4310] device veth0_vlan left promiscuous mode [ 387.358488][ T4310] device veth1_macvtap left promiscuous mode [ 387.364686][ T4310] device veth0_macvtap left promiscuous mode [ 387.371070][ T4310] device veth1_vlan left promiscuous mode [ 387.376901][ T4310] device veth0_vlan left promiscuous mode [ 387.584453][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 387.613188][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 387.641663][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.677417][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.731855][ T4310] bond0 (unregistering): Released all slaves [ 387.871496][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 387.903764][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 387.933165][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.962503][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.017721][ T4310] bond0 (unregistering): Released all slaves [ 388.102628][ T6561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.113945][ T6561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.137825][ T6561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.158967][ T6583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.167979][ T6561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.180837][ T6583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.198479][ T6583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.222815][ T6583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.340043][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.367358][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.377962][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.392623][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.410672][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.421706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.441300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.458156][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.465364][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.506186][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.514989][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.525878][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.536021][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.546012][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.553229][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.565790][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.574905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.584283][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.593911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.603686][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.612669][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.622475][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.630613][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.641409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.649883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.658252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.701302][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.711031][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.722542][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.729709][ T6489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.737595][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.748191][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.757267][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.777828][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.789517][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.797939][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.805109][ T6461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.829494][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.854319][ T6561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.867020][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.898986][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.907738][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.937025][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.960941][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.978271][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.008371][ T6583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.047945][ T6583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.063901][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.073729][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.085044][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.094219][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.106043][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.236074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.247700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.263541][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.366050][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.378238][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.402042][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.675286][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.691844][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.724403][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.739965][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.762883][ T6561] device veth0_vlan entered promiscuous mode [ 389.781478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.789923][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.804733][ T6561] device veth1_vlan entered promiscuous mode [ 389.823249][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.832796][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.844865][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.873150][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.885036][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.894175][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.905741][ T6583] device veth0_vlan entered promiscuous mode [ 389.922829][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.931652][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.941617][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.952756][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.962448][ T6561] device veth0_macvtap entered promiscuous mode [ 389.974212][ T6583] device veth1_vlan entered promiscuous mode [ 389.984748][ T6561] device veth1_macvtap entered promiscuous mode [ 390.019173][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.029829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.038618][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.048045][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.057300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.066334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.084577][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.095239][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.106070][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.116970][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.126919][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.138184][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.149902][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.159799][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.170478][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.180701][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.191418][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.201538][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.212477][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.224042][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.236232][ T6583] device veth0_macvtap entered promiscuous mode [ 390.244586][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.253682][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.264086][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.273096][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.284844][ T6561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.294030][ T6561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.303528][ T6561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.313041][ T6561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.324395][ T6583] device veth1_macvtap entered promiscuous mode [ 390.357010][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.368498][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.379331][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.390113][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.399999][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.410548][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.420522][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.431547][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.443593][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.457893][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.469920][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.483083][ T6561] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 390.491557][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.502459][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.513784][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.524359][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.534317][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.545221][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.555268][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.566228][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.578318][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.592822][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.602016][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.619414][ T6583] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.628131][ T6583] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.640556][ T6583] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.649953][ T6583] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.667662][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.668541][ T6561] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 390.684297][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.694065][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.733148][ T6583] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 390.753580][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.768276][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.787470][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.803549][ T5624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.814333][ T5624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.814390][ T6583] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 390.842210][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.870726][ T6489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.895321][ T6489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.904578][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready