last executing test programs: 12.672800104s ago: executing program 1 (id=536): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) close(0x3) 12.537599665s ago: executing program 1 (id=537): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20040840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 11.580207319s ago: executing program 1 (id=539): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000003c003780090001007866726d000000002c00028008"], 0x64}}, 0x0) 11.22205754s ago: executing program 1 (id=541): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@typedef={0x3}, @ptr]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) getsockname$packet(r1, &(0x7f0000000080), &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x6c00}, 0x0) 9.959608471s ago: executing program 1 (id=544): ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000000100), 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f00000001c0)=""/166, 0xa6, 0x0) 9.721085031s ago: executing program 2 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0xb1, 0xafc, &(0x7f0000000000)="c3d39abf31168c92", &(0x7f0000000440)="9229d90c9824b9ddbb967378104722a1c483e921b568ff793b68aeffc3f3b567427a2162813a4c54a531dcb695a8e83e42a2cb0f68e397c60628b510b90aeb8008d43a186c2e89753051e71913c17989b25598fbe91d05402d65de9769b7faf345c843fde5a4c8fe2517d7af4c7dabda3047c0657aa618079154a02b1d3d0058f82bdf654b591537c379129b4f3dfc8a3ed81dd0e524502a7ab388775d86a113b8a1da155e44a019b495a3dd86650cd1c3040c516cf1517f3845449f0c5aa464e228", 0x8, 0xc2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.93593328s ago: executing program 4 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_open_procfs(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x280000c, &(0x7f0000000900)=ANY=[@ANYBLOB="7061f167000078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRES64, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRES16, @ANYBLOB="2c756d6107003d30302c666b3024df8fd7db09261f04000000000000000400000000", @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16], 0x1, 0x6ee, &(0x7f0000001e80)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000001400)='./bus\x00', 0x40080, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x1, [[0x8], [0x0, 0x1], [0xfb, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]], '\x00', [{0x7, 0x1}, {}, {}, {0x0, 0x1, 0x0, 0x1}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT], 0xff, 0x7bc, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') preadv(r5, &(0x7f0000000140), 0x0, 0x0, 0x0) 6.970482191s ago: executing program 2 (id=549): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) 6.502550173s ago: executing program 4 (id=552): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x806148, &(0x7f0000000280)={[{@resgid}, {@dioread_nolock}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@noblock_validity}, {@dax_never}, {@errors_remount}]}, 0xe, 0x4eb, &(0x7f0000000840)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x50242, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000482b00fc021300000000000000000000000000fe80000000000000001000000000ffaa0000000000489078030000000100000056979cb58df60707a9420a23c3c237b8bc84e89ed0af"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x20199e, &(0x7f0000000640)={[{@quota}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x6dd2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0xe7}}, {@dax_never}], [{@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@uid_lt}]}, 0x0, 0x471, &(0x7f00000017c0)="$eJzs28trXFUYAPDv3jxqXybW+uhDjVYx+EiatGoXLlQUXFQQ3NRlTNJSmzbSRLClaBWpSym4F5eCf4Er3Yi6EtzqXgpFurEKwsjN3NvJTGYmD2bm2s7vB9OcM/fcOefLuSdzzj29AfStseyfJGJXRPwWESPVbH2BseqPmzcuzf5949JsEpXKW38mK+X+unFptihanLczz4ynEemnSRxoUu/ShYtnZhYW5s/n+cnls+9NLl24+OzpszOn5k/Nn5s+duzokakXnp9+riNx3pO1df+Hiwf3vf721TdmT1x956dvkiL+hjg6ZKzdwScqlQ5XV67dq9LJYIkNYVMGIiLrrqGV8T8SA1HrvJF47ZNSGwd0VSXX4vDlCnAHS6LsFgDlKL7os/Vv8erd7KN811+uLoCyuG/mr+qRwUijujAaaljfdtJYRJy4/M+X2Su6cx8CAKDOd9n855lm87807l9V7u58b2g030vZExH3RsTeiLgvYqXsAxHx4Cbrb9wkWTv/Sa9tKbANyuZ/L+Z7W/Xzv7QoMjqQ53avZIaSk6cX5g/nv5PxGNqW5afa1PH9q79+3urY6vlf9srqL+aCEcf/bXbO3MzyzNYjrnf944j9g83iT27tBCQRsS8i9m+xjtNPfX2w1bHG+CtJu096qT7bgX2mylcRT1b7/3I0xF9I2u9PTt4VC/OHJ4urYq2ff7nyZqv62/d/92X9v6Pp9X8r/tFk9X7t0ubruPL7Zy3XNBPrxp9eG9xWf87cTO2N4fznBzPLy+enIoaT49VGr35/unZukS/KZ/GPH2o+/vdE7TdxICKyi/ihiHg4Ih7J++7RiHgsIg61if/HVx5/t9Wx/0P/zzX0/2h9kYb+ryWGo/Gd5omBMz98W/+JteT68Wf9f3QlNZ6/s5G/fxtp19auZgAAALj9pBGxK5J04lY6TScmqv+Hf2/sSBcWl5afPrn4/rm56jMCozGUFne6qveDq/dDp/JlfZGfbsgfye8bfzGwfSU/Mbu4MFd28NDndrYY/5k/BspuHdB1W91HO9/hdgC9t3b8D5fSDqD3PK8N/cv4h/7VZPxvL6MdQO81+/7/qJasjPSyMUBPNYx/237QR6z/oX8Z/9C/Vo//ts/fA3eSpe2x/kPyW00k+R+Tzn+yRJcSseHCka45VFxUpUex6UTS5TbvKjvAVoltra+E5qwVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA28x/AQAA//+c/d63") getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) close(r1) 6.016340285s ago: executing program 3 (id=554): syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_emit_vhci(0x0, 0x7) close_range(r6, 0xffffffffffffffff, 0x0) 5.999329537s ago: executing program 2 (id=555): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004d00)={0x2020}, 0x2020) 5.95689099s ago: executing program 4 (id=556): r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000000c0)="5100030000", 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r5}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5889}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000103}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) rt_sigqueueinfo(r2, 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0xce21, 0x0, @remote, 0x1}}, 0x24) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.098929325s ago: executing program 3 (id=558): pipe(&(0x7f0000000080)) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = inotify_init1(0x0) fcntl$getownex(r6, 0x10, &(0x7f00000001c0)) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 4.133079299s ago: executing program 0 (id=559): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x4040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 4.031368498s ago: executing program 3 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 3.985885963s ago: executing program 3 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff07) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000004d0502d5, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 3.792928479s ago: executing program 0 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_open_procfs(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x280000c, &(0x7f0000000900)=ANY=[@ANYBLOB="7061f167000078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRES64, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRES16, @ANYBLOB="2c756d6107003d30302c666b3024df8fd7db09261f04000000000000000400000000", @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16], 0x1, 0x6ee, &(0x7f0000001e80)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000001400)='./bus\x00', 0x40080, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x1, [[0x8], [0x0, 0x1], [0xfb, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]], '\x00', [{0x7, 0x1}, {}, {}, {0x0, 0x1, 0x0, 0x1}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT], 0xff, 0x7bc, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') preadv(r5, &(0x7f0000000140), 0x0, 0x0, 0x0) 3.751394773s ago: executing program 2 (id=563): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(0x0, 0x8000) fstat(r0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/46, 0x2e}, {0x0}], 0x2, 0xfff, 0x0) 3.742594173s ago: executing program 1 (id=564): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x40, 0x9, 0x15, "45174932573871ac43a4f3d916edf3db8d97a7359a"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x81, 0x1, 'u'}, &(0x7f0000000e00)={0x20, 0x82, 0x2, 'u)'}, &(0x7f0000000e40)={0x20, 0x83, 0x1, '$'}, &(0x7f0000000e80)={0x20, 0x84, 0x4, "c792bdf2"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "fdde1d"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x40, 0x23, 0x2, {0x2, 0x22}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x0, 0x4, 0x81, "80903d4ab3bf35882ec03998fa473ee17982f0d2f0afa1f6f46bb0988f701896c130b7ff47ce38ca8104e4eff394489ce10f058834406c6e3ec8d2490ecf6076b5f898fe92e131705235d48444eafac146850c5ef59a05f66fd152e78bead390e92d0d1ce6677aef2b652b701b9e6de7140d5925802f3c47725ce5250a798b8063"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}}) 3.317627841s ago: executing program 0 (id=565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) 2.352856465s ago: executing program 2 (id=566): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x806148, &(0x7f0000000280)={[{@resgid}, {@dioread_nolock}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@noblock_validity}, {@dax_never}, {@errors_remount}]}, 0xe, 0x4eb, &(0x7f0000000840)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x50242, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000482b00fc021300000000000000000000000000fe80000000000000001000000000ffaa0000000000489078030000000100000056979cb58df60707a9420a23c3c237b8bc84e89ed0af"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x20199e, &(0x7f0000000640)={[{@quota}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x6dd2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0xe7}}, {@dax_never}], [{@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@uid_lt}]}, 0x0, 0x471, &(0x7f00000017c0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) close(r1) 2.218842627s ago: executing program 0 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) socket(0x6, 0x2, 0xfff) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 2.090958428s ago: executing program 2 (id=568): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6, {0x6, 0x0, "392cdaab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r1, 0x81, 0xe1, &(0x7f0000000240)="b9425b446512d23236973599b76c4705397f00466e5b7462c24a16941ff5f4b4f1f0add7fc8280adbfa66d5b5ebe1adf42b8f59f90604e07d2388862672dfbf3e0c9d3969890524f3323746bde8946c7ec160f9e688f6b86781684ed273a5bd5531d459dc627ec0af211ebbf909987f5d2e8dcb3351da332165081af7d0814c57f5d65e4b436aa9f50bc0f19b7df372ff9ebcede1ff0cc752cf246a5d2da34a5a297dc14a469c3dd3e26b41c356484e06fd66e3f2c7807e8773ecd7b94fad89ab84feadec2ea95f65bba452eaef4b0cf962e05000000000000001107e2815e472c") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x8}, @rumble}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.775511325s ago: executing program 4 (id=569): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/62, 0x3e}], 0x1) 1.309562226s ago: executing program 0 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 966.171216ms ago: executing program 3 (id=571): pipe(&(0x7f0000000080)) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = inotify_init1(0x0) fcntl$getownex(r6, 0x10, &(0x7f00000001c0)) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 159.387237ms ago: executing program 0 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x0, 0x3a}, 0x1c) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffff7f000000000000000085000000170000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000085000035334ef8c5c40f9b008000"/96], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_complete(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xc, 0x6, 0x84, 0x102, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000100), 0x100, r5}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000500)={0x1, 0x0, 0x2, &(0x7f0000000540)={0x0, "0500e7d85c8bbfe6931aa54bce5d926e7908d527733a7700000000000000000100"}}) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r9, r8, 0x0) 116.218201ms ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x29) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) 10.241819ms ago: executing program 4 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x28, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8001}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_open_procfs(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x280000c, &(0x7f0000000900)=ANY=[@ANYBLOB="7061f167000078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRES64, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRES16, @ANYBLOB="2c756d6107003d30302c666b3024df8fd7db09261f04000000000000000400000000", @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16], 0x1, 0x6ee, &(0x7f0000001e80)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000001400)='./bus\x00', 0x40080, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x1, [[0x8], [0x0, 0x1], [0xfb, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]], '\x00', [{0x7, 0x1}, {}, {}, {0x0, 0x1, 0x0, 0x1}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT], 0xff, 0x7bc, &(0x7f0000000a80)="$eJzs3U9sHGfZAPBnXbvJ50pR1a9KoyhNJ2mRUil11+vWxeqhbNdjZ9r17mp3jRwh1EaNU1lx2qqlgvpAyaUFBEKcOBauvXEDIYHEATgh0QMXbpV6QgWBhEAIyWhmdx3HXtup6/yh/f2s+B3PPPO+z7vezLNje2YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhSbbZcnixFPWssLiXbjEREcn8/dmH79g2D/n51XbPLuBGl/F8cPhzHequO3X9t89H80+k40fvqRBzOm8Oxds/Re5/+/9GRwf67JLRfp24wrhTxrTypyxdWV5dfvwmJ3ELf/cVuW0eHrfzXev55Pm1knWa2UJ1Pk6zTTGamp8uPn5vrJHNZPe2c73TThaTWTqvdZjs5U3s0mZyZmUrSifPNxcb8bLWeDlY+9VilXJ5OnptopdV2p9l4/LmJTu1cVq9njfkiplL+euQxTyW12fbzWTfpptWFJLm0sro8tdfs8qDJXbafeOTej9788O8ry/kTcqegUv+JWZmcrFQmp5+cefKpcnm0Uq5cv6K8RWxExEhEHnFTnrTcOYpD5m4O5sANB2CkX/+jHlk0YjGWIhnyMRa1mI12NGMh//qPY9si+gb1/wuP/+X3u427uf4Pqvyxa5uPR1H/T/a+OrlT/R+a60F+jPTz2Wn7G/FWrMXluBCrsRrL8fpNz+hTfowcbH/zkUYjsuhEM7JYiGqxJumvSWImpmM6yvFCnIu56EQSc5FFPdLoxPnoRDfS4hlVi3akUY1uNKMdSZyJWjwaSUzGTMzEVCSRxkScj2YsRiPmYzaqRS+XYqV43Ke25HX0my/+/OU/fPRevrwRNLnLREr5i7k86G+7BG0r9zde/9ejH6H+f94d8BEc9m99UP8BAACAz6xS8dP3/Px/LB4sluayevqV250WAAAAcICK3/yfyJuxfOnBKOXn/+UhkR/c8twAAACAg1EqrrErRcR4PNRbGlwuNeyHAAAAAMD/oOL3/yfzZjzi7WKF838AAAD4jPn2TvfY/3Bwj91O61Dpl3+NdnusdLW19EjpSjWPq165q7dfv/nyRo/dueOlw9HrpOhrenTtnlJEjNbSE6XB3S//c6jXflx8Pj66sftO9/ovbUlgY4+7tk4pT+DI2pYEjhYDfy9O9WJOXey1F/tx/TsSj89l9XSi1qw/XdwSMf/XffOVlW9EMf3vNBaOlOLSyuryxEuvrl4scrma93L1Sv8Gitvuozg8l2LE9f4jEA8On/FYcSFGf9zx3rjlzd+A/r2JR3Yfs7R5zHfidC/m9HivHb9+/ofzMScnnp6MavXISDdd6r65vmn2/SwmP+XM34mHezEPn3m41wzJonJdFq9sz6KyOYsbeyz2zGKs/8R679TbS//4TbOUTu2VxdSWLA5/wiwAbpdLxV1/rlWh/yuq0L/Xe/L6f63uJr2Avv5R7oGNrvKj3KAMbDnKXYqNLYP9N9W60dhW3be+vIgto+xwRD/TiznTez0xenxIXSkPOaK/tvLab/tH9Cfe/9GPv3rydz/df3V7Px7txfSbuO/XO9TYfM7fbyyMDzpdeqa/8JMdx+3UK6UYi7jra1dei6NvvLX22MqVCy8vv7z8SqUyNV1+olx+shJjxUuFfqP2ADDE3u+xs2dE6Yk9zqrv2/iTgol4KV6N1bgYZ4urDSLioeG9jm/6M4SzcTqKk+UdzlrHN73Dy9k9zi2vxVa2xw5eV2yLndr0iD3ww6L55038pgDATXZ6jzp8I/X/7B7n3dfX8i1nx7FzLR/mizf10QCAz4e0/XFpvPtuqd3OWi9MzsxMVrvn0qTdrD2ftLPZ+TTJGt20XTtXbcynSavd7DZrgx8cz6adpLPYajXb3WSu2U5azU62VLzze9J/6/dOulBtdLNap1VPq500qTUb3Wqtm8xmnVrSuvvZetY5l7aLnTuttJbNZbVqN2s2kk5zsV1LJ5Kkk6ZJa3EQmM2mjW42l+WLjaTVzhaq7asRUV9cSJPZtFNrZ61us9fhYKysMddsLxTdTmyf/p9v9eMNAHeCN95au3xhdXX59U+4MBrFwp9uJPh2zxEAuJ4qDQAAAAAAAAAAAAAAd77tl+vla/dzReDaofjkex2KfV19uM+FfGq3aqzbv5DP9g5I4/YuvPjMM5d3inn27WPnbqyf4f9Thl3q+u6RiLt/9oPemi/dqpl+sL8n9nppl5jbfGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCH+GwAA///Q4FXw") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') preadv(r5, &(0x7f0000000140), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3913 @ nid 36 [ 75.545544][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3912 @ nid 36 [ 75.555742][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3911 @ nid 36 [ 75.565138][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3910 @ nid 36 [ 75.574463][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3909 @ nid 36 [ 75.584619][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3908 @ nid 36 [ 75.593966][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3907 @ nid 36 [ 75.603747][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3906 @ nid 36 [ 75.613515][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3905 @ nid 36 [ 75.623850][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3904 @ nid 36 [ 75.633216][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3903 @ nid 36 [ 75.642576][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3902 @ nid 36 [ 75.651905][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3901 @ nid 36 [ 75.662432][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3900 @ nid 36 [ 75.672706][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3899 @ nid 36 [ 75.682234][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3898 @ nid 36 [ 75.691462][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3897 @ nid 36 [ 75.700668][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3896 @ nid 36 [ 75.709883][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3895 @ nid 36 [ 75.719640][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3894 @ nid 36 [ 75.728870][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3893 @ nid 36 [ 75.738087][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3892 @ nid 36 [ 75.747300][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3891 @ nid 36 [ 75.756552][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3890 @ nid 36 [ 75.765758][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3889 @ nid 36 [ 75.775156][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3888 @ nid 36 [ 75.784337][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3887 @ nid 36 [ 75.793565][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3886 @ nid 36 [ 75.802868][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3885 @ nid 36 [ 75.812074][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3884 @ nid 36 [ 75.822331][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3883 @ nid 36 [ 75.831558][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3882 @ nid 36 [ 75.842449][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3881 @ nid 36 [ 75.851691][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3880 @ nid 36 [ 75.861120][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3879 @ nid 36 [ 75.870386][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3878 @ nid 36 [ 75.879682][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3877 @ nid 36 [ 75.889259][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3876 @ nid 36 [ 75.898589][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3875 @ nid 36 [ 75.908062][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3874 @ nid 36 [ 75.917455][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3873 @ nid 36 [ 75.927254][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3872 @ nid 36 [ 75.936465][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3871 @ nid 36 [ 75.945682][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3870 @ nid 36 [ 75.954875][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3869 @ nid 36 [ 75.964126][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3868 @ nid 36 [ 75.973361][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3867 @ nid 36 [ 75.982720][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3866 @ nid 36 [ 75.992016][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3865 @ nid 36 [ 76.001253][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3864 @ nid 36 [ 76.010503][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3863 @ nid 36 [ 76.020025][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3862 @ nid 36 [ 76.030059][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3861 @ nid 36 [ 76.039413][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3860 @ nid 36 [ 76.048649][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3859 @ nid 36 [ 76.058027][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3858 @ nid 36 [ 76.067238][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3857 @ nid 36 [ 76.076569][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3856 @ nid 36 [ 76.085840][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3855 @ nid 36 [ 76.095186][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3854 @ nid 36 [ 76.104520][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3853 @ nid 36 [ 76.114066][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3852 @ nid 36 [ 76.123270][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3851 @ nid 36 [ 76.133068][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3850 @ nid 36 [ 76.143213][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3849 @ nid 36 [ 76.152471][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3848 @ nid 36 [ 76.161692][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3847 @ nid 36 [ 76.170912][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3846 @ nid 36 [ 76.180429][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3845 @ nid 36 [ 76.189703][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3844 @ nid 36 [ 76.199156][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3843 @ nid 36 [ 76.208374][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3842 @ nid 36 [ 76.217586][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3841 @ nid 36 [ 76.226814][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3840 @ nid 36 [ 76.236737][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3839 @ nid 36 [ 76.245977][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3838 @ nid 36 [ 76.255201][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3837 @ nid 36 [ 76.264391][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3836 @ nid 36 [ 76.273647][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3835 @ nid 36 [ 76.282957][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3834 @ nid 36 [ 76.292175][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3833 @ nid 36 [ 76.301377][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3832 @ nid 36 [ 76.310782][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3831 @ nid 36 [ 76.320043][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3830 @ nid 36 [ 76.329283][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3829 @ nid 36 [ 76.339124][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3828 @ nid 36 [ 76.348475][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3827 @ nid 36 [ 76.357806][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3826 @ nid 36 [ 76.367121][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3825 @ nid 36 [ 76.376453][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3824 @ nid 36 [ 76.385969][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3823 @ nid 36 [ 76.395325][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3822 @ nid 36 [ 76.404560][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3821 @ nid 36 [ 76.413850][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3820 @ nid 36 [ 76.423078][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3819 @ nid 36 [ 76.432332][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3818 @ nid 36 [ 76.442311][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3817 @ nid 36 [ 76.451689][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3816 @ nid 36 [ 76.461044][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3815 @ nid 36 [ 76.470280][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3814 @ nid 36 [ 76.482139][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3813 @ nid 36 [ 76.491501][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3812 @ nid 36 [ 76.500814][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3811 @ nid 36 [ 76.510033][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3810 @ nid 36 [ 76.519286][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3809 @ nid 36 [ 76.528950][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3808 @ nid 36 [ 76.538753][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3807 @ nid 36 [ 76.548111][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3806 @ nid 36 [ 76.557540][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3805 @ nid 36 [ 76.566762][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3804 @ nid 36 [ 76.576166][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3803 @ nid 36 [ 76.585392][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3802 @ nid 36 [ 76.594669][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3801 @ nid 36 [ 76.604061][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3800 @ nid 36 [ 76.613535][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3799 @ nid 36 [ 76.622750][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3798 @ nid 36 [ 76.632141][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3797 @ nid 36 [ 76.641923][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3796 @ nid 36 [ 76.651155][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3795 @ nid 36 [ 76.660557][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3794 @ nid 36 [ 76.670080][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3793 @ nid 36 [ 76.680397][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3792 @ nid 36 [ 76.689737][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3791 @ nid 36 [ 76.698947][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3790 @ nid 36 [ 76.708164][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3789 @ nid 36 [ 76.718206][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3788 @ nid 36 [ 76.727530][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3787 @ nid 36 [ 76.736753][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3786 @ nid 36 [ 76.746618][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3785 @ nid 36 [ 76.755959][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3784 @ nid 36 [ 76.765354][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3783 @ nid 36 [ 76.774674][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3782 @ nid 36 [ 76.783900][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3781 @ nid 36 [ 76.793127][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3780 @ nid 36 [ 76.802442][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3779 @ nid 36 [ 76.811656][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3778 @ nid 36 [ 76.820857][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3777 @ nid 36 [ 76.830065][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3776 @ nid 36 [ 76.839277][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3775 @ nid 36 [ 76.849031][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3774 @ nid 36 [ 76.858286][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3773 @ nid 36 [ 76.867503][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3772 @ nid 36 [ 76.877154][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3771 @ nid 36 [ 76.886365][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3770 @ nid 36 [ 76.895583][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3769 @ nid 36 [ 76.904782][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3768 @ nid 36 [ 76.914118][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3767 @ nid 36 [ 76.923630][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3766 @ nid 36 [ 76.933143][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3765 @ nid 36 [ 76.942534][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3764 @ nid 36 [ 76.952319][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3763 @ nid 36 [ 76.961550][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3762 @ nid 36 [ 76.970778][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3761 @ nid 36 [ 76.980034][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3760 @ nid 36 [ 76.989362][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3759 @ nid 36 [ 76.998560][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3758 @ nid 36 [ 77.007775][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3757 @ nid 36 [ 77.016975][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3756 @ nid 36 [ 77.026194][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3755 @ nid 36 [ 77.035530][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3754 @ nid 36 [ 77.044796][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3753 @ nid 36 [ 77.054576][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3752 @ nid 36 [ 77.063803][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3751 @ nid 36 [ 77.073039][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3750 @ nid 36 [ 77.082565][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3749 @ nid 36 [ 77.092116][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3748 @ nid 36 [ 77.101378][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3747 @ nid 36 [ 77.110637][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3746 @ nid 36 [ 77.121378][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3745 @ nid 36 [ 77.130803][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3744 @ nid 36 [ 77.140034][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3743 @ nid 36 [ 77.149270][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3742 @ nid 36 [ 77.159210][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3741 @ nid 36 [ 77.168463][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3740 @ nid 36 [ 77.177714][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3739 @ nid 36 [ 77.186945][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3738 @ nid 36 [ 77.196171][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3737 @ nid 36 [ 77.205501][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3736 @ nid 36 [ 77.214674][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3735 @ nid 36 [ 77.223902][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3734 @ nid 36 [ 77.233214][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3733 @ nid 36 [ 77.242413][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3732 @ nid 36 [ 77.251648][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3731 @ nid 36 [ 77.261396][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3730 @ nid 36 [ 77.270709][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3729 @ nid 36 [ 77.280007][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3728 @ nid 36 [ 77.289235][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3727 @ nid 36 [ 77.298440][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3726 @ nid 36 [ 77.307670][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3725 @ nid 36 [ 77.316892][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3724 @ nid 36 [ 77.326187][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3723 @ nid 36 [ 77.335593][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3722 @ nid 36 [ 77.344799][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3721 @ nid 36 [ 77.354045][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3720 @ nid 36 [ 77.363800][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3719 @ nid 36 [ 77.373252][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3718 @ nid 36 [ 77.382912][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3717 @ nid 36 [ 77.392372][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3716 @ nid 36 [ 77.401778][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3715 @ nid 36 [ 77.411009][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3714 @ nid 36 [ 77.420222][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3713 @ nid 36 [ 77.429432][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3712 @ nid 36 [ 77.438713][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3711 @ nid 36 [ 77.448327][ C0] sched: RT throttling activated [ 77.463945][ T1292] cfg80211: failed to load regulatory.db [ 77.480356][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3710 @ nid 36 [ 77.489705][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3709 @ nid 36 [ 77.499174][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3708 @ nid 36 [ 77.508531][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3707 @ nid 36 [ 77.517853][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3706 @ nid 36 [ 77.527091][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3705 @ nid 36 [ 77.536308][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3704 @ nid 36 [ 77.545531][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3703 @ nid 36 [ 77.555290][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3702 @ nid 36 [ 77.565080][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3701 @ nid 36 [ 77.574261][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3700 @ nid 36 [ 77.583678][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3699 @ nid 36 [ 77.592989][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3698 @ nid 36 [ 77.602196][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3697 @ nid 36 [ 77.611397][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3696 @ nid 36 [ 77.620595][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3695 @ nid 36 [ 77.629784][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3694 @ nid 36 [ 77.638991][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3693 @ nid 36 [ 77.648185][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3692 @ nid 36 [ 77.657397][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3691 @ nid 36 [ 77.666593][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3690 @ nid 36 [ 77.675807][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3689 @ nid 36 [ 77.685022][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3688 @ nid 36 [ 77.694194][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3687 @ nid 36 [ 77.703489][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3686 @ nid 36 [ 77.712690][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3685 @ nid 36 [ 77.721899][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3684 @ nid 36 [ 77.731112][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3683 @ nid 36 [ 77.740304][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3682 @ nid 36 [ 77.749508][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3681 @ nid 36 [ 77.758704][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3680 @ nid 36 [ 77.767926][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3679 @ nid 36 [ 77.777149][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3678 @ nid 36 [ 77.786381][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3677 @ nid 36 [ 77.795596][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3676 @ nid 36 [ 77.804878][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3675 @ nid 36 [ 77.814117][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3674 @ nid 36 [ 77.823334][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3673 @ nid 36 [ 77.832546][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3672 @ nid 36 [ 77.841760][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3671 @ nid 36 [ 77.850974][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3670 @ nid 36 [ 77.860181][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3669 @ nid 36 [ 77.869478][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3668 @ nid 36 [ 77.878772][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3667 @ nid 36 [ 77.887969][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3666 @ nid 36 [ 77.897180][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3665 @ nid 36 [ 77.906378][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3664 @ nid 36 [ 77.915867][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3663 @ nid 36 [ 77.925283][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3662 @ nid 36 [ 77.934475][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3661 @ nid 36 [ 77.943762][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3660 @ nid 36 [ 77.953003][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3659 @ nid 36 [ 77.962227][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3658 @ nid 36 [ 77.971584][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3657 @ nid 36 [ 77.980823][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3656 @ nid 36 [ 77.990180][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3655 @ nid 36 [ 77.999594][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3654 @ nid 36 [ 78.008810][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3653 @ nid 36 [ 78.018011][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3652 @ nid 36 [ 78.027210][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3651 @ nid 36 [ 78.036407][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3650 @ nid 36 [ 78.045908][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3649 @ nid 36 [ 78.055227][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3648 @ nid 36 [ 78.064829][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3647 @ nid 36 [ 78.074359][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3646 @ nid 36 [ 78.083614][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3645 @ nid 36 [ 78.092840][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3644 @ nid 36 [ 78.102048][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3643 @ nid 36 [ 78.111432][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3642 @ nid 36 [ 78.121096][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3641 @ nid 36 [ 78.130359][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3640 @ nid 36 [ 78.139861][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3639 @ nid 36 [ 78.149160][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3638 @ nid 36 [ 78.158469][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3637 @ nid 36 [ 78.167701][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3636 @ nid 36 [ 78.177067][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3635 @ nid 36 [ 78.186285][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3634 @ nid 36 [ 78.195500][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3633 @ nid 36 [ 78.204680][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3632 @ nid 36 [ 78.213879][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3631 @ nid 36 [ 78.223157][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3630 @ nid 36 [ 78.232360][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3629 @ nid 36 [ 78.241567][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3628 @ nid 36 [ 78.250788][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3627 @ nid 36 [ 78.259986][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3626 @ nid 36 [ 78.269185][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3625 @ nid 36 [ 78.278487][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3624 @ nid 36 [ 78.287690][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3623 @ nid 36 [ 78.296907][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3622 @ nid 36 [ 78.306277][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3621 @ nid 36 [ 78.315560][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3620 @ nid 36 [ 78.324955][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3619 @ nid 36 [ 78.334192][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3618 @ nid 36 [ 78.343408][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3617 @ nid 36 [ 78.352619][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3616 @ nid 36 [ 78.361819][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3615 @ nid 36 [ 78.371047][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3614 @ nid 36 [ 78.380251][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3613 @ nid 36 [ 78.389445][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3612 @ nid 36 [ 78.398655][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3611 @ nid 36 [ 78.407877][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3610 @ nid 36 [ 78.417177][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3609 @ nid 36 [ 78.470055][ T3575] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 78.480381][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3608 @ nid 36 [ 78.490368][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3607 @ nid 36 [ 78.499747][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3606 @ nid 36 [ 78.508968][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3605 @ nid 36 [ 78.518317][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 78.527584][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 78.537100][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 78.546808][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 78.556405][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 78.565805][ T3924] erofs: (device loop0): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 78.676447][ T3575] usb 5-1: config 0 descriptor?? [ 78.705260][ T3575] usb 5-1: can't set config #0, error -71 [ 78.708784][ T3929] loop1: detected capacity change from 0 to 512 [ 78.732422][ T3575] usb 5-1: USB disconnect, device number 3 [ 79.811641][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 79.900003][ T3945] loop3: detected capacity change from 0 to 512 [ 79.930175][ T3929] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 79.944820][ T3929] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 80.057234][ T3945] loop3: detected capacity change from 0 to 512 [ 81.660842][ T3970] loop3: detected capacity change from 0 to 256 [ 81.951569][ T3973] lo speed is unknown, defaulting to 1000 [ 82.187965][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 82.187978][ T26] audit: type=1804 audit(1725733587.470:66): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.96" name="/newroot/26/file0/file0" dev="loop3" ino=1048598 res=1 errno=0 [ 82.515805][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.603103][ T3981] loop4: detected capacity change from 0 to 256 [ 82.650566][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.704280][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.714832][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.795109][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 82.804634][ T3984] Zero length message leads to an empty skb [ 82.925409][ T23] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 82.950526][ T3986] loop4: detected capacity change from 0 to 512 [ 82.952271][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 83.925300][ T3986] loop4: detected capacity change from 0 to 512 [ 83.972628][ T3993] loop2: detected capacity change from 0 to 256 [ 84.035999][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.069069][ T23] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.130042][ T23] usb 2-1: Product: syz [ 84.145149][ T23] usb 2-1: Manufacturer: syz [ 84.172395][ T23] usb 2-1: SerialNumber: syz [ 84.205151][ T23] usb 2-1: config 0 descriptor?? [ 84.266466][ T23] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.305452][ T23] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.429287][ T1292] usb 2-1: USB disconnect, device number 3 [ 84.446112][ T1292] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 84.629110][ T3997] lo speed is unknown, defaulting to 1000 [ 84.759130][ T4007] loop1: detected capacity change from 0 to 512 [ 84.911339][ T4007] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 84.931406][ T4007] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 85.547897][ T3997] chnl_net:caif_netlink_parms(): no params data found [ 85.609654][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 85.816956][ T4032] loop1: detected capacity change from 0 to 512 [ 85.866277][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.893720][ T3997] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.947084][ T3997] device bridge_slave_0 entered promiscuous mode [ 85.958949][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.968525][ T3997] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.977334][ T3997] device bridge_slave_1 entered promiscuous mode [ 85.998599][ T4039] loop1: detected capacity change from 0 to 512 [ 86.062418][ T3997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.108848][ T3997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.259627][ T3997] team0: Port device team_slave_0 added [ 86.286042][ T3997] team0: Port device team_slave_1 added [ 86.391265][ T4047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.423052][ T3997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.438570][ T3997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.477023][ T1292] Bluetooth: hci5: command 0x0409 tx timeout [ 86.495210][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.518771][ T3997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.553102][ T3997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.580672][ T3997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.668872][ T3997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.735136][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 86.802610][ T3997] device hsr_slave_0 entered promiscuous mode [ 86.824193][ T3997] device hsr_slave_1 entered promiscuous mode [ 86.854703][ T3997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.864281][ T13] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 86.888324][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.901508][ T3997] Cannot create hsr debugfs directory [ 86.939282][ T13] usb 2-1: config 0 descriptor?? [ 87.205325][ T13] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 87.246601][ T13] asix: probe of 2-1:0.0 failed with error -32 [ 87.348858][ T3997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.565521][ T3997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.672353][ T3997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.799567][ T3997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.892732][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 87.903082][ T4057] loop4: detected capacity change from 0 to 256 [ 88.026328][ T3997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.160167][ T3997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.186429][ T3997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.368445][ T26] audit: type=1804 audit(1725733593.610:67): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.120" name="/newroot/22/file0/file0" dev="loop4" ino=1048603 res=1 errno=0 [ 88.603963][ T1292] Bluetooth: hci5: command 0x041b tx timeout [ 88.629268][ T3997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.876161][ T3997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.913919][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.953021][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.981206][ T3997] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.084875][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.099837][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.117739][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.125004][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.178255][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.273786][ T23] usb 2-1: USB disconnect, device number 4 [ 89.276050][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.331064][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.342890][ T4020] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.350471][ T4020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.362066][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.398926][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.422575][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.462305][ T4071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.484307][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.506951][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.520005][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.536051][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.564019][ T4073] loop4: detected capacity change from 0 to 1024 [ 89.581460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.605029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.681356][ T3997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.691681][ T4075] loop2: detected capacity change from 0 to 512 [ 89.803372][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.814317][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.827371][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.635370][ T3575] Bluetooth: hci5: command 0x040f tx timeout [ 90.866585][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.882027][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.941232][ T3997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.060081][ T4100] loop1: detected capacity change from 0 to 512 [ 91.098934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.119886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.136406][ T4103] loop3: detected capacity change from 0 to 1024 [ 91.209668][ T3997] device veth0_vlan entered promiscuous mode [ 91.222300][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.331973][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.366571][ T3997] device veth1_vlan entered promiscuous mode [ 91.617085][ T3997] device veth0_macvtap entered promiscuous mode [ 91.661320][ T3997] device veth1_macvtap entered promiscuous mode [ 91.992777][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.085013][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.169918][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.231020][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.241290][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.251778][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.261790][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.272377][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.282360][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.379311][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.391083][ T3997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.401354][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.411344][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.419370][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.429958][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.445218][ T3613] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.464182][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.682847][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.830119][ T3615] Bluetooth: hci5: command 0x0419 tx timeout [ 92.838340][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.846448][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.855491][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.869024][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.915330][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 92.919002][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.041539][ T4122] loop4: detected capacity change from 0 to 1024 [ 93.691034][ T26] audit: type=1326 audit(1725733598.970:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.701682][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.726612][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 93.741349][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.744315][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.744360][ T3613] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.765917][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.775532][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.783983][ T26] audit: type=1326 audit(1725733599.000:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.789876][ T3613] usb 2-1: config 0 descriptor?? [ 93.807427][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.837646][ T26] audit: type=1326 audit(1725733599.010:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.868881][ T26] audit: type=1326 audit(1725733599.010:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.885311][ T4100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.897986][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.921149][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.921992][ T26] audit: type=1326 audit(1725733599.010:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.974627][ T3997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.974633][ T26] audit: type=1326 audit(1725733599.010:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 93.974664][ T26] audit: type=1326 audit(1725733599.010:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cdae17 code=0x7ffc0000 [ 94.042054][ T26] audit: type=1326 audit(1725733599.010:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4e09cdad8c code=0x7ffc0000 [ 94.079847][ T26] audit: type=1326 audit(1725733599.010:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4e09cdacc4 code=0x7ffc0000 [ 94.104451][ T3997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.140186][ T26] audit: type=1326 audit(1725733599.010:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4e09cdacc4 code=0x7ffc0000 [ 94.177272][ T3613] usbhid 2-1:0.0: can't add hid device: -71 [ 94.183218][ T3613] usbhid: probe of 2-1:0.0 failed with error -71 [ 94.213613][ T3997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.245668][ T4122] hfsplus: unable to parse mount options [ 94.280748][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.288649][ T3613] usb 2-1: USB disconnect, device number 5 [ 94.319906][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.337523][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.386487][ T3997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.416380][ T4121] loop4: detected capacity change from 0 to 764 [ 94.430492][ T3997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.474385][ T3997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.494369][ T3997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519141][ T4121] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 94.898196][ T2671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.943887][ T2671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.042974][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.700591][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.052472][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.836663][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.864405][ T4146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.902976][ T4145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.109627][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 99.144073][ T4152] loop4: detected capacity change from 0 to 512 [ 99.260484][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 99.260494][ T26] audit: type=1326 audit(1725733604.540:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 99.320615][ T4152] loop4: detected capacity change from 0 to 512 [ 99.430837][ T26] audit: type=1326 audit(1725733604.570:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 99.753909][ T4164] loop2: detected capacity change from 0 to 1024 [ 101.032648][ T26] audit: type=1326 audit(1725733604.580:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.056226][ T4164] hfsplus: unable to parse mount options [ 101.082866][ T26] audit: type=1326 audit(1725733604.580:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.182636][ T26] audit: type=1326 audit(1725733604.580:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.208175][ T26] audit: type=1326 audit(1725733604.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.231534][ T26] audit: type=1326 audit(1725733604.580:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.264637][ T26] audit: type=1326 audit(1725733604.580:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 101.313856][ T26] audit: type=1326 audit(1725733604.620:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c937e17 code=0x7ffc0000 [ 101.407017][ T4177] loop2: detected capacity change from 0 to 512 [ 101.440526][ T26] audit: type=1326 audit(1725733604.620:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f174c937d8c code=0x7ffc0000 [ 101.657602][ T4177] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 101.748636][ T4187] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 101.777573][ T4187] loop1: detected capacity change from 0 to 256 [ 101.867714][ T4177] ext4 filesystem being mounted at /36/bus supports timestamps until 2038 (0x7fffffff) [ 102.149481][ T4187] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 102.982046][ T4202] loop2: detected capacity change from 0 to 512 [ 104.010689][ T4214] loop1: detected capacity change from 0 to 1024 [ 104.040507][ T4216] loop4: detected capacity change from 0 to 256 [ 104.065862][ T4214] hfsplus: unable to parse mount options [ 104.245983][ T4213] loop1: detected capacity change from 0 to 764 [ 104.942903][ T4213] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 105.322015][ T4230] binder: 4226:4230 ioctl 4018620d 0 returned -22 [ 105.364073][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 105.364084][ T26] audit: type=1326 audit(1725733610.640:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.545657][ T26] audit: type=1326 audit(1725733610.690:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.592186][ T26] audit: type=1326 audit(1725733610.690:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.623708][ T26] audit: type=1326 audit(1725733610.690:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.703197][ T26] audit: type=1326 audit(1725733610.690:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.852829][ T26] audit: type=1326 audit(1725733610.690:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 105.980705][ T26] audit: type=1326 audit(1725733610.690:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc409efe17 code=0x7ffc0000 [ 106.165523][ T26] audit: type=1326 audit(1725733610.690:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbc409efd8c code=0x7ffc0000 [ 106.214402][ T4247] loop3: detected capacity change from 0 to 512 [ 106.261327][ T26] audit: type=1326 audit(1725733610.690:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbc409efcc4 code=0x7ffc0000 [ 106.288035][ T26] audit: type=1326 audit(1725733610.690:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbc409efcc4 code=0x7ffc0000 [ 106.402581][ T4247] loop3: detected capacity change from 0 to 512 [ 107.596305][ T4265] loop1: detected capacity change from 0 to 256 [ 107.686715][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 111.996662][ T4282] binder: 4279:4282 ioctl 4018620d 0 returned -22 [ 112.180323][ T4286] loop2: detected capacity change from 0 to 512 [ 112.309444][ T4286] loop2: detected capacity change from 0 to 512 [ 112.425236][ T4295] loop4: detected capacity change from 0 to 1024 [ 112.549848][ T4295] hfsplus: unable to parse mount options [ 113.091680][ T4294] loop4: detected capacity change from 0 to 764 [ 113.178403][ T4294] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 113.189955][ T4299] loop2: detected capacity change from 0 to 256 [ 113.568659][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 113.568672][ T26] audit: type=1326 audit(1725733618.850:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 113.702431][ T26] audit: type=1326 audit(1725733618.860:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 113.780018][ T26] audit: type=1326 audit(1725733618.880:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 113.875957][ T26] audit: type=1326 audit(1725733618.880:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 114.009455][ T26] audit: type=1326 audit(1725733618.880:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 114.099849][ T26] audit: type=1326 audit(1725733618.880:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 114.223269][ T26] audit: type=1326 audit(1725733618.880:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 114.364541][ T26] audit: type=1326 audit(1725733618.880:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbfc19ef9 code=0x7ffc0000 [ 114.482504][ T26] audit: type=1326 audit(1725733618.880:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bbfc1be17 code=0x7ffc0000 [ 114.549641][ T26] audit: type=1326 audit(1725733618.880:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8bbfc1bd8c code=0x7ffc0000 [ 115.133193][ T4329] binder: 4327:4329 ioctl 4018620d 0 returned -22 [ 115.354710][ T4333] loop3: detected capacity change from 0 to 256 [ 116.412019][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 121.167724][ T4366] loop1: detected capacity change from 0 to 512 [ 121.440396][ T4366] loop1: detected capacity change from 0 to 512 [ 121.655060][ T4379] loop3: detected capacity change from 0 to 1024 [ 122.366082][ T4379] hfsplus: unable to parse mount options [ 122.408118][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 122.408127][ T26] audit: type=1326 audit(1725733627.690:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 122.464364][ T4378] loop3: detected capacity change from 0 to 764 [ 122.491036][ T26] audit: type=1326 audit(1725733627.720:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 122.534733][ T4386] binder: 4382:4386 ioctl c0306201 0 returned -14 [ 122.571826][ T26] audit: type=1326 audit(1725733627.720:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 122.596019][ T4378] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 122.672504][ T26] audit: type=1326 audit(1725733627.720:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 122.833265][ T26] audit: type=1326 audit(1725733627.720:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 123.110447][ T4401] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 123.412180][ T26] audit: type=1326 audit(1725733627.720:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 123.510265][ T4401] syz.3.234 (4401) used greatest stack depth: 19512 bytes left [ 123.527733][ T3044] lo speed is unknown, defaulting to 1000 [ 123.596783][ T26] audit: type=1326 audit(1725733627.720:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 123.621820][ T4406] loop3: detected capacity change from 0 to 128 [ 123.827845][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.910223][ T4406] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 123.954405][ T26] audit: type=1326 audit(1725733627.720:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc409edef9 code=0x7ffc0000 [ 123.980074][ T26] audit: type=1326 audit(1725733627.720:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc409efe17 code=0x7ffc0000 [ 123.991544][ T4411] loop1: detected capacity change from 0 to 512 [ 124.193337][ T26] audit: type=1326 audit(1725733627.720:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbc409efd8c code=0x7ffc0000 [ 124.678208][ T4411] loop1: detected capacity change from 0 to 512 [ 124.975607][ T4429] loop4: detected capacity change from 0 to 1024 [ 125.149872][ T4429] hfsplus: unable to parse mount options [ 125.299685][ T4429] loop4: detected capacity change from 0 to 764 [ 125.766904][ T4429] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 125.894115][ T4441] binder: 4437:4441 ioctl c0306201 0 returned -14 [ 125.912273][ T4440] loop3: detected capacity change from 0 to 128 [ 126.073669][ T4440] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 126.924045][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 127.204826][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 129.218045][ T4490] binder: BINDER_SET_CONTEXT_MGR already set [ 129.373562][ T4490] binder: 4481:4490 ioctl 4018620d 20000040 returned -16 [ 129.413742][ T4501] binder: 4481:4501 ioctl c0306201 0 returned -14 [ 130.482346][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.307254][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.359146][ T4516] device bridge_slave_0 left promiscuous mode [ 131.487995][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.846678][ T4516] device bridge_slave_1 left promiscuous mode [ 131.875208][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.955136][ T4516] bond0: (slave bond_slave_0): Releasing backup interface [ 132.012420][ T4516] bond0: (slave bond_slave_1): Releasing backup interface [ 132.165032][ T4539] loop4: detected capacity change from 0 to 1024 [ 132.250416][ T4539] hfsplus: unable to parse mount options [ 132.379040][ T4516] team0: Port device team_slave_0 removed [ 132.591968][ T4516] team0: Port device team_slave_1 removed [ 132.608571][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.618733][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.628515][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.638916][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.664668][ T4516] syz.2.268 (4516) used greatest stack depth: 19224 bytes left [ 132.753347][ T4544] binder: BINDER_SET_CONTEXT_MGR already set [ 132.762530][ T4544] binder: 4542:4544 ioctl 4018620d 20000040 returned -16 [ 132.796826][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803216][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.055567][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 135.350614][ T4587] loop3: detected capacity change from 0 to 1024 [ 135.856189][ T4587] hfsplus: unable to parse mount options [ 135.926660][ T4586] loop3: detected capacity change from 0 to 764 [ 135.962590][ T4589] loop1: detected capacity change from 0 to 512 [ 135.987233][ T4586] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 137.120677][ T4589] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.149392][ T4589] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.200541][ T4589] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 137.397055][ T4589] __quota_error: 42 callbacks suppressed [ 137.397069][ T4589] Quota error (device loop1): write_blk: dquota write failed [ 137.416451][ T4589] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 137.426800][ T4589] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.288: Failed to acquire dquot type 0 [ 137.608661][ T4589] EXT4-fs (loop1): 1 truncate cleaned up [ 137.692254][ T4589] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 138.337247][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 138.352621][ T4606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.293'. [ 138.373630][ C1] eth0: bad gso: type: 1, size: 1408 [ 138.382887][ T4605] process 'syz.0.293' launched './file0' with NULL argv: empty string added [ 138.550588][ T4612] loop4: detected capacity change from 0 to 512 [ 138.552878][ T4604] process '/newroot/37/file0' started with executable stack [ 139.941806][ T4636] loop2: detected capacity change from 0 to 1024 [ 140.636165][ T4636] hfsplus: unable to parse mount options [ 140.718414][ T4635] loop2: detected capacity change from 0 to 764 [ 140.728853][ T4637] binder: BINDER_SET_CONTEXT_MGR already set [ 140.734847][ T4637] binder: 4631:4637 ioctl 4018620d 20000040 returned -16 [ 140.746802][ T4635] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 141.023475][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 141.238032][ T4649] loop3: detected capacity change from 0 to 512 [ 142.318127][ T3569] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.361591][ T3569] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.401300][ T4649] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 142.550445][ T4649] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.306: invalid block [ 142.563211][ T4649] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.306: couldn't read orphan inode 11 (err -117) [ 142.576831][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,noinit_itable,max_dir_size_kb=0x0000000000000009,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,i_version,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 142.912361][ T3569] syz-executor (3569) used greatest stack depth: 19136 bytes left [ 143.069715][ T3664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.360889][ T3664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.495366][ T4676] loop4: detected capacity change from 0 to 1024 [ 144.136104][ T4676] hfsplus: unable to parse mount options [ 144.218351][ T3664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.237304][ T4674] loop4: detected capacity change from 0 to 764 [ 144.278359][ T4674] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 144.302063][ T3664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.823436][ T4689] lo speed is unknown, defaulting to 1000 [ 147.631524][ T3575] Bluetooth: hci0: command 0x0409 tx timeout [ 147.739469][ T4708] loop3: detected capacity change from 0 to 512 [ 147.989735][ T4708] loop3: detected capacity change from 0 to 512 [ 148.494395][ T4736] loop3: detected capacity change from 0 to 1024 [ 148.949207][ T4689] chnl_net:caif_netlink_parms(): no params data found [ 149.156161][ T4736] hfsplus: unable to parse mount options [ 149.236914][ T4735] loop3: detected capacity change from 0 to 764 [ 149.289151][ T4735] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.375285][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 149.537240][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.788853][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.885661][ T1075] Bluetooth: hci0: command 0x041b tx timeout [ 149.944513][ T4689] device bridge_slave_0 entered promiscuous mode [ 150.031098][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.046471][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.167202][ T4689] device bridge_slave_1 entered promiscuous mode [ 150.186251][ T4764] binder: BINDER_SET_CONTEXT_MGR already set [ 150.857275][ T4764] binder: 4760:4764 ioctl 4018620d 20000040 returned -16 [ 150.938689][ C1] eth0: bad gso: type: 1, size: 1408 [ 151.986658][ T1075] Bluetooth: hci0: command 0x040f tx timeout [ 152.011620][ T4689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.067655][ T4689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.083650][ T4782] loop3: detected capacity change from 0 to 1024 [ 152.195680][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 152.197903][ T4786] loop2: detected capacity change from 0 to 512 [ 152.306783][ T4689] team0: Port device team_slave_0 added [ 152.342003][ T4689] team0: Port device team_slave_1 added [ 152.454467][ T4792] loop2: detected capacity change from 0 to 512 [ 152.996762][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.003900][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.263259][ T4689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.908179][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.984123][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.995225][ T1075] Bluetooth: hci0: command 0x0419 tx timeout [ 154.196650][ T4689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.630803][ T3664] device hsr_slave_0 left promiscuous mode [ 154.662665][ T3664] device hsr_slave_1 left promiscuous mode [ 154.692051][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.727895][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.853977][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.894492][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.930187][ T3664] device bridge_slave_1 left promiscuous mode [ 154.988847][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.063314][ T3664] device bridge_slave_0 left promiscuous mode [ 155.095860][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.447818][ T3664] device veth1_macvtap left promiscuous mode [ 156.467952][ T3664] device veth0_macvtap left promiscuous mode [ 156.489197][ T4847] loop2: detected capacity change from 0 to 512 [ 156.499714][ T3664] device veth1_vlan left promiscuous mode [ 156.510033][ T3664] device veth0_vlan left promiscuous mode [ 156.838907][ T4855] loop2: detected capacity change from 0 to 512 [ 157.036920][ T3664] bond1 (unregistering): Released all slaves [ 157.316631][ T3664] team0 (unregistering): Port device team_slave_1 removed [ 157.399223][ T3664] team0 (unregistering): Port device team_slave_0 removed [ 157.466125][ T3664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.499362][ T3664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.687657][ T3664] bond0 (unregistering): Released all slaves [ 158.214230][ T4689] device hsr_slave_0 entered promiscuous mode [ 158.269081][ T4689] device hsr_slave_1 entered promiscuous mode [ 158.302656][ T4689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.337475][ T4689] Cannot create hsr debugfs directory [ 158.526214][ T4878] binder: 4875:4878 ioctl c0306201 0 returned -14 [ 158.900830][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 160.459681][ T4905] loop4: detected capacity change from 0 to 1024 [ 161.255683][ T4905] hfsplus: unable to parse mount options [ 161.336718][ T4904] loop4: detected capacity change from 0 to 764 [ 161.379658][ T4904] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 161.393987][ T4913] loop2: detected capacity change from 0 to 512 [ 161.591667][ T4913] loop2: detected capacity change from 0 to 512 [ 161.883447][ T4689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.746892][ T4689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.848305][ T4689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.160656][ T4689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.489360][ T4947] binder: 4942:4947 ioctl c0306201 0 returned -14 [ 163.602881][ T4689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.732572][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.753785][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.829097][ T4689] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.884577][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.912330][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.040206][ T4957] loop2: detected capacity change from 0 to 1024 [ 164.716106][ T4957] hfsplus: unable to parse mount options [ 164.745766][ T2671] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.752888][ T2671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.820431][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.970328][ T4956] loop2: detected capacity change from 0 to 764 [ 165.595318][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 165.703754][ T4973] loop4: detected capacity change from 0 to 512 [ 165.732233][ T4689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.795664][ T4689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.834213][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 165.840706][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 165.848124][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 165.857955][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.889973][ T4956] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.968073][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.184205][ T4980] loop4: detected capacity change from 0 to 512 [ 166.211023][ T2671] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.218146][ T2671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.226029][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.236941][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.247095][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.258642][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.273689][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.334748][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.393868][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.463509][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.473424][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.482803][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.497546][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.556348][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.693325][ T5001] input: syz0 as /devices/virtual/input/input7 [ 166.962939][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.999158][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.070468][ T4689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.096377][ T26] audit: type=1326 audit(1725733672.380:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.192841][ T26] audit: type=1326 audit(1725733672.410:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.231928][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.256164][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.279405][ T26] audit: type=1326 audit(1725733672.410:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.383316][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.396319][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.432455][ T26] audit: type=1326 audit(1725733672.420:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.470428][ T4689] device veth0_vlan entered promiscuous mode [ 167.485630][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.504804][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.575665][ T4689] device veth1_vlan entered promiscuous mode [ 167.601371][ T5017] binder: 5013:5017 ioctl c0306201 0 returned -14 [ 167.610654][ T26] audit: type=1326 audit(1725733672.420:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.721598][ T26] audit: type=1326 audit(1725733672.420:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 167.762888][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.783001][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.849230][ T26] audit: type=1326 audit(1725733672.420:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cdae17 code=0x7ffc0000 [ 167.874000][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.920095][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.967635][ T4689] device veth0_macvtap entered promiscuous mode [ 167.983723][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.994272][ T26] audit: type=1326 audit(1725733672.420:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4e09cdad8c code=0x7ffc0000 [ 168.036280][ T4689] device veth1_macvtap entered promiscuous mode [ 168.052756][ T5023] loop3: detected capacity change from 0 to 512 [ 168.098664][ T26] audit: type=1326 audit(1725733672.420:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4e09cdacc4 code=0x7ffc0000 [ 168.143537][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.189854][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.195675][ T26] audit: type=1326 audit(1725733672.420:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4e09cdacc4 code=0x7ffc0000 [ 168.260500][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.299013][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.312445][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.326780][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.350887][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.395594][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.416592][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.445738][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.454459][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.484447][ T5023] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.485727][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.626615][ T5023] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.631925][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.647359][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.683267][ T5023] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 168.836306][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.846312][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.860762][ T5023] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.385: Failed to acquire dquot type 0 [ 168.920704][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.037301][ T5023] EXT4-fs (loop3): 1 truncate cleaned up [ 169.084834][ T4689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.122010][ T5023] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 169.248628][ T4689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.338103][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.412425][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.516467][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.586158][ T4689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.603546][ T4689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.646189][ T4689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.654926][ T4689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.888241][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 169.903624][ T2671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.939428][ T2671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.972304][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.070440][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.090177][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.122826][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.852376][ T5114] loop4: detected capacity change from 0 to 1024 [ 174.176315][ T5114] hfsplus: unable to parse mount options [ 174.754259][ T5128] loop2: detected capacity change from 0 to 512 [ 175.022319][ T5113] loop4: detected capacity change from 0 to 764 [ 175.033484][ T5113] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 175.632578][ T5138] loop2: detected capacity change from 0 to 512 [ 176.714493][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 176.801624][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 176.801645][ T26] audit: type=1326 audit(1725733682.080:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 176.965498][ T26] audit: type=1326 audit(1725733682.110:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 177.113554][ T26] audit: type=1326 audit(1725733682.110:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 177.307615][ T26] audit: type=1326 audit(1725733682.110:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 178.193056][ T26] audit: type=1326 audit(1725733682.110:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 178.216348][ T26] audit: type=1326 audit(1725733682.110:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 178.341956][ T26] audit: type=1326 audit(1725733682.110:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 178.470928][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 178.484892][ T26] audit: type=1326 audit(1725733682.110:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c937e17 code=0x7ffc0000 [ 178.562080][ T26] audit: type=1326 audit(1725733682.110:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f174c937d8c code=0x7ffc0000 [ 178.690518][ T5192] loop1: detected capacity change from 0 to 1024 [ 179.406015][ T5192] hfsplus: unable to parse mount options [ 179.496119][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 179.522671][ T26] audit: type=1326 audit(1725733682.110:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f174c937cc4 code=0x7ffc0000 [ 179.778887][ T1075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.215287][ T1075] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.695069][ T1075] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 180.825177][ T1075] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.876047][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.915998][ T1075] usb 5-1: SerialNumber: syz [ 181.311786][ T5202] loop4: detected capacity change from 0 to 512 [ 181.474938][ T5202] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.420: corrupted in-inode xattr [ 181.543786][ T5202] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.420: couldn't read orphan inode 15 (err -117) [ 181.557857][ T5202] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 181.816827][ T5244] loop3: detected capacity change from 0 to 1024 [ 182.396986][ T5234] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 312: padding at end of block bitmap is not set [ 182.816224][ T5244] hfsplus: unable to parse mount options [ 182.862860][ T1075] usb 5-1: USB disconnect, device number 4 [ 182.876267][ T5243] loop3: detected capacity change from 0 to 764 [ 183.015351][ T5243] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 183.582107][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 183.582120][ T26] audit: type=1326 audit(1725733688.860:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 183.782788][ T26] audit: type=1326 audit(1725733688.920:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 183.895311][ T26] audit: type=1326 audit(1725733688.920:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 184.689955][ T5242] lo speed is unknown, defaulting to 1000 [ 184.696767][ T26] audit: type=1326 audit(1725733688.920:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 184.825364][ T26] audit: type=1326 audit(1725733688.940:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 185.878770][ T26] audit: type=1326 audit(1725733688.940:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 186.031527][ T26] audit: type=1326 audit(1725733688.950:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32b3ed9e17 code=0x7ffc0000 [ 186.059096][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 186.062750][ T26] audit: type=1326 audit(1725733689.040:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 186.103848][ T26] audit: type=1326 audit(1725733689.040:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b3ed7ef9 code=0x7ffc0000 [ 186.728000][ T5297] loop1: detected capacity change from 0 to 512 [ 186.827000][ T5297] loop1: detected capacity change from 0 to 512 [ 186.969430][ T5301] loop3: detected capacity change from 0 to 1024 [ 187.606097][ T5301] hfsplus: unable to parse mount options [ 187.778012][ T5300] loop3: detected capacity change from 0 to 764 [ 188.527002][ T5300] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 188.811832][ T5316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.451'. [ 188.880938][ T26] audit: type=1326 audit(1725733694.160:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 188.971185][ T26] audit: type=1326 audit(1725733694.190:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.069896][ T26] audit: type=1326 audit(1725733694.200:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.400413][ T26] audit: type=1326 audit(1725733694.200:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.424089][ T26] audit: type=1326 audit(1725733694.200:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.484294][ T26] audit: type=1326 audit(1725733694.200:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e09cdae17 code=0x7ffc0000 [ 189.520045][ T26] audit: type=1326 audit(1725733694.210:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.587483][ T26] audit: type=1326 audit(1725733694.210:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.641264][ T26] audit: type=1326 audit(1725733694.210:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 189.685318][ T26] audit: type=1326 audit(1725733694.220:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e09cd8ef9 code=0x7ffc0000 [ 190.609690][ T5339] binder: BINDER_SET_CONTEXT_MGR already set [ 190.643491][ T5339] binder: 5337:5339 ioctl 4018620d 20000040 returned -16 [ 190.858399][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 191.848450][ T5350] loop1: detected capacity change from 0 to 1024 [ 192.616137][ T5350] hfsplus: unable to parse mount options [ 194.004679][ T5355] lo speed is unknown, defaulting to 1000 [ 194.075473][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 194.238572][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245008][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.343536][ T5381] binder: BINDER_SET_CONTEXT_MGR already set [ 194.430777][ T5381] binder: 5378:5381 ioctl 4018620d 20000040 returned -16 [ 194.613480][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 195.161156][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.175167][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.228232][ T5355] device bridge_slave_0 entered promiscuous mode [ 195.272634][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.315200][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.365526][ T5355] device bridge_slave_1 entered promiscuous mode [ 195.713268][ T5404] loop3: detected capacity change from 0 to 1024 [ 196.267122][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.329223][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.470165][ T5355] team0: Port device team_slave_0 added [ 196.495588][ T1292] Bluetooth: hci6: command 0x0409 tx timeout [ 196.510883][ T5355] team0: Port device team_slave_1 added [ 196.555588][ T5404] hfsplus: unable to parse mount options [ 196.669131][ T5403] loop3: detected capacity change from 0 to 764 [ 196.713149][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.771622][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 196.771642][ T26] audit: type=1326 audit(1725733702.040:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 196.804858][ T5403] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 196.895848][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.046344][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.054131][ T26] audit: type=1326 audit(1725733702.120:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 197.163877][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.176376][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.204499][ T26] audit: type=1326 audit(1725733702.120:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 197.238109][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.260757][ T26] audit: type=1326 audit(1725733702.130:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 197.288892][ T26] audit: type=1326 audit(1725733702.130:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 197.312048][ T26] audit: type=1326 audit(1725733702.140:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef98ac7e17 code=0x7ffc0000 [ 197.355660][ T26] audit: type=1326 audit(1725733702.140:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fef98ac7d8c code=0x7ffc0000 [ 197.506173][ T5355] device hsr_slave_0 entered promiscuous mode [ 197.522152][ T26] audit: type=1326 audit(1725733702.140:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef98ac7cc4 code=0x7ffc0000 [ 197.696599][ T5355] device hsr_slave_1 entered promiscuous mode [ 197.710985][ T26] audit: type=1326 audit(1725733702.140:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef98ac7cc4 code=0x7ffc0000 [ 197.714151][ T5421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.481'. [ 197.753298][ T26] audit: type=1326 audit(1725733702.140:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef98ac4b8a code=0x7ffc0000 [ 197.765241][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.165388][ T5355] Cannot create hsr debugfs directory [ 198.209813][ C1] eth0: bad gso: type: 1, size: 1408 [ 198.264298][ T3683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.399772][ T3683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.556589][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 198.609748][ T3683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.763335][ T3683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.870614][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 199.629586][ T5459] kernel profiling enabled (shift: 17) [ 200.207701][ T5355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.385375][ T5355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.413254][ T5355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.435769][ T3683] device hsr_slave_0 left promiscuous mode [ 200.463153][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 200.645733][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 201.017198][ T3683] device hsr_slave_1 left promiscuous mode [ 201.155696][ T3683] device veth1_macvtap left promiscuous mode [ 201.161758][ T3683] device veth0_macvtap left promiscuous mode [ 201.183507][ T3683] device veth1_vlan left promiscuous mode [ 201.296406][ T3683] device veth0_vlan left promiscuous mode [ 201.470103][ T5489] 9pnet: Insufficient options for proto=fd [ 202.748767][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 202.748781][ T26] audit: type=1326 audit(1725733708.030:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 202.819461][ T26] audit: type=1326 audit(1725733708.060:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 202.881809][ T26] audit: type=1326 audit(1725733708.060:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 202.905842][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 202.912578][ T5506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.940406][ T26] audit: type=1326 audit(1725733708.070:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 202.964362][ T26] audit: type=1326 audit(1725733708.070:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 202.990264][ T26] audit: type=1326 audit(1725733708.070:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef98ac5ef9 code=0x7ffc0000 [ 203.019960][ T26] audit: type=1326 audit(1725733708.070:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef98ac7e17 code=0x7ffc0000 [ 203.065739][ T26] audit: type=1326 audit(1725733708.070:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fef98ac7d8c code=0x7ffc0000 [ 203.092183][ T26] audit: type=1326 audit(1725733708.070:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef98ac7cc4 code=0x7ffc0000 [ 203.118230][ T26] audit: type=1326 audit(1725733708.070:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef98ac7cc4 code=0x7ffc0000 [ 203.229453][ T3683] bond0 (unregistering): Released all slaves [ 203.317423][ T5355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.440678][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.503574][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.521918][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.556652][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.006342][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 205.072786][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.106234][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.125321][ T3646] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.173326][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.180491][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.238898][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.312022][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.384733][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.392048][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.488996][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.495391][ T3646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.501746][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.523227][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.545158][ T3646] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.550069][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.596052][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.605129][ T3646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.627257][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.662206][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.675474][ T3646] usb 4-1: config 0 descriptor?? [ 205.699286][ T5355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.719386][ T5355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.753137][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.774508][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.848424][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.898705][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.968394][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.998547][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.227427][ T3646] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 206.283695][ T3646] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input8 [ 206.417611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.426114][ T5533] udc-core: couldn't find an available UDC or it's busy [ 206.437804][ T5533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.458087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.476499][ T5533] udc-core: couldn't find an available UDC or it's busy [ 206.536107][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.549924][ T5533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.558034][ T1292] Bluetooth: hci5: command 0x0406 tx timeout [ 206.574584][ T3646] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 206.629795][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.659508][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.752046][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.788172][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.836841][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.868173][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.921040][ T5355] device veth0_vlan entered promiscuous mode [ 206.992811][ T5355] device veth1_vlan entered promiscuous mode [ 207.165537][ T5582] loop1: detected capacity change from 0 to 1024 [ 207.699944][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.788913][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.799288][ T7] usb 4-1: USB disconnect, device number 4 [ 207.826407][ T5582] hfsplus: unable to parse mount options [ 207.881863][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.913463][ T5581] loop1: detected capacity change from 0 to 764 [ 207.939929][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.958886][ T5581] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.991306][ T5355] device veth0_macvtap entered promiscuous mode [ 208.047793][ T5355] device veth1_macvtap entered promiscuous mode [ 208.182058][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.197625][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.210170][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.252216][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.273404][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.291947][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.301991][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.336020][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.352831][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.403921][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.481965][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.579902][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.602414][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.624701][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.652488][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.685481][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.703836][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.724174][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.826028][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.864363][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.575119][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.625041][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.651201][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.767156][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.783535][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.823088][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.857666][ T5355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.633562][ T5355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.643759][ T5355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.652900][ T5355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.665827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.706074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.824006][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 210.985446][ T5620] netlink: 168 bytes leftover after parsing attributes in process `syz.1.533'. [ 211.072840][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.192792][ T5624] loop4: detected capacity change from 0 to 1024 [ 211.846373][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.886258][ T5624] hfsplus: unable to parse mount options [ 211.942960][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.963127][ T5623] loop4: detected capacity change from 0 to 764 [ 211.993155][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.007022][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 212.007036][ T26] audit: type=1326 audit(1725733717.290:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 212.153323][ T5623] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 212.167083][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.044119][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 213.097276][ T26] audit: type=1326 audit(1725733717.330:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 213.125214][ T5638] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 213.163151][ T5638] netlink: 'syz.1.539': attribute type 2 has an invalid length. [ 213.231281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.280134][ T26] audit: type=1326 audit(1725733717.330:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 213.334763][ T5645] loop2: detected capacity change from 0 to 512 [ 213.388594][ T26] audit: type=1326 audit(1725733717.460:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 213.568111][ T5645] loop2: detected capacity change from 0 to 512 [ 213.594508][ T26] audit: type=1326 audit(1725733717.460:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 213.870935][ T26] audit: type=1326 audit(1725733717.460:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 214.068940][ T26] audit: type=1326 audit(1725733717.460:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174c937e17 code=0x7ffc0000 [ 214.661012][ T26] audit: type=1326 audit(1725733717.460:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f174c937d8c code=0x7ffc0000 [ 215.691783][ T26] audit: type=1326 audit(1725733717.460:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f174c937cc4 code=0x7ffc0000 [ 217.487985][ T5676] loop4: detected capacity change from 0 to 1024 [ 217.640592][ T26] audit: type=1326 audit(1725733717.470:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f174c937cc4 code=0x7ffc0000 [ 217.715578][ T5676] hfsplus: unable to parse mount options [ 217.844904][ T5675] loop4: detected capacity change from 0 to 764 [ 217.868657][ T26] audit: type=1326 audit(1725733717.470:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f174c934b8a code=0x7ffc0000 [ 217.921059][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.932307][ T5675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.036468][ T26] audit: type=1326 audit(1725733718.280:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 218.215126][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 218.249218][ T26] audit: type=1326 audit(1725733718.300:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174c935ef9 code=0x7ffc0000 [ 218.332846][ T5696] loop4: detected capacity change from 0 to 512 [ 218.365226][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 218.393482][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.408336][ T26] audit: type=1326 audit(1725733723.020:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb791ef9 code=0x7ffc0000 [ 218.423086][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.470629][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.580563][ T26] audit: type=1326 audit(1725733723.020:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03eb791ef9 code=0x7ffc0000 [ 218.604175][ T7] usb 4-1: can't set config #16, error -71 [ 218.617767][ T5701] binder: BINDER_SET_CONTEXT_MGR already set [ 218.623759][ T5701] binder: 5699:5701 ioctl 4018620d 20000040 returned -16 [ 218.632948][ T7] usb 4-1: USB disconnect, device number 5 [ 218.713562][ T26] audit: type=1326 audit(1725733723.020:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb791ef9 code=0x7ffc0000 [ 218.739991][ T26] audit: type=1326 audit(1725733723.020:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03eb791ef9 code=0x7ffc0000 [ 218.782335][ T26] audit: type=1326 audit(1725733723.020:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb791ef9 code=0x7ffc0000 [ 218.841900][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 218.868276][ T26] audit: type=1326 audit(1725733723.020:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03eb793e17 code=0x7ffc0000 [ 221.585173][ T1074] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.263097][ T5747] loop2: detected capacity change from 0 to 512 [ 222.405643][ T5747] loop2: detected capacity change from 0 to 512 [ 222.445229][ T1074] usb 2-1: Using ep0 maxpacket: 16 [ 222.541984][ T5750] binder: 5748:5750 ioctl c0306201 0 returned -14 [ 222.565526][ T1074] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 222.585961][ T1074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 222.645396][ T1074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 222.666917][ T1074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 222.693094][ T1074] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 222.704686][ T1074] usb 2-1: config 0 has no interface number 0 [ 222.712710][ T1074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 222.737047][ T1074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 222.773034][ T1074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.818791][ T1074] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.838432][ T1074] usb 2-1: config 0 interface 125 has no altsetting 0 [ 222.853706][ T1074] usb 2-1: config 0 interface 125 has no altsetting 2 [ 223.036675][ T1075] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.079090][ T1074] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 223.090784][ T1074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.105472][ T1074] usb 2-1: Product: syz [ 223.109956][ T1074] usb 2-1: Manufacturer: syz [ 223.114856][ T1074] usb 2-1: SerialNumber: syz [ 223.140778][ T1074] usb 2-1: config 0 descriptor?? [ 223.211245][ T1074] usb 2-1: selecting invalid altsetting 2 [ 223.415213][ T1075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.435160][ T1075] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.462806][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.501062][ T1075] usb 3-1: config 0 descriptor?? [ 224.235103][ T1074] get_1284_register timeout [ 224.239958][ T1074] uss720: probe of 2-1:0.125 failed with error -5 [ 224.246623][ C0] usb 2-1: async_complete: urb error -104 [ 224.246819][ C0] usb 2-1: async_complete: urb error -104 [ 224.573039][ T27] INFO: task syz.0.81:3924 blocked for more than 143 seconds. [ 224.584757][ T27] Not tainted 5.15.166-syzkaller #0 [ 224.590650][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.599353][ T27] task:syz.0.81 state:D stack:23832 pid: 3924 ppid: 3571 flags:0x00004004 [ 224.608818][ T27] Call Trace: [ 224.612121][ T27] [ 224.615110][ T27] __schedule+0x12c4/0x45b0 [ 224.619662][ T27] ? blk_flush_plug_list+0x452/0x490 [ 224.625591][ T27] ? release_firmware_map_entry+0x190/0x190 [ 224.643847][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.646276][ T1075] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 224.657769][ T27] ? blk_check_plugged+0x250/0x250 [ 224.658598][ T7] usb 2-1: USB disconnect, device number 6 [ 224.685240][ T27] ? print_irqtrace_events+0x210/0x210 [ 224.703766][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 224.720758][ T27] schedule+0x11b/0x1f0 [ 224.723963][ T1075] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input9 [ 224.778776][ T27] io_schedule+0x88/0x100 [ 224.837577][ T5773] loop3: detected capacity change from 0 to 1024 [ 224.865542][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 224.891788][ T27] ? wait_on_page_bit+0x50/0x50 [ 224.915089][ T27] ? rcu_lock_release+0x20/0x20 [ 224.943732][ T27] ? bio_add_page+0x2b3/0x450 [ 224.972812][ T27] z_erofs_runqueue+0x788/0x1a80 [ 224.996921][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 225.022323][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 225.051973][ T27] z_erofs_readahead+0xc9a/0x1280 [ 225.440528][ T5774] udc-core: couldn't find an available UDC or it's busy [ 225.448566][ T27] ? z_erofs_readpage+0x840/0x840 [ 225.454049][ T27] read_pages+0x159/0x8e0 [ 225.458877][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 225.464533][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 225.470417][ T5774] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.484530][ T27] ? page_cache_ra_unbounded+0x509/0x930 [ 225.526267][ T5752] udc-core: couldn't find an available UDC or it's busy [ 225.534070][ T5752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.537376][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 225.560897][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 225.571556][ T5752] udc-core: couldn't find an available UDC or it's busy [ 225.578947][ T5752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.593719][ T27] force_page_cache_ra+0x378/0x3e0 [ 225.594106][ T5752] udc-core: couldn't find an available UDC or it's busy [ 225.607215][ T27] generic_fadvise+0x5ba/0x8b0 [ 225.608018][ T5752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.612623][ T27] ? dump_task+0x5f0/0x5f0 [ 225.632119][ T27] ? __fdget+0x191/0x220 [ 225.639752][ T27] __x64_sys_fadvise64+0x138/0x180 [ 225.649019][ T27] do_syscall_64+0x3b/0xb0 [ 225.658253][ T27] ? clear_bhb_loop+0x15/0x70 [ 225.665424][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.671485][ T27] RIP: 0033:0x7f199f23def9 [ 225.676744][ T27] RSP: 002b:00007f199d696038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 225.685588][ T27] RAX: ffffffffffffffda RBX: 00007f199f3f7058 RCX: 00007f199f23def9 [ 225.693774][ T27] RDX: 0000000000000000 RSI: 0000000000e0ffff RDI: 0000000000000006 [ 225.702301][ T27] RBP: 00007f199f2b0046 R08: 0000000000000000 R09: 0000000000000000 [ 225.710725][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 225.719538][ T27] R13: 0000000000000000 R14: 00007f199f3f7058 R15: 00007ffdc0b0e1f8 [ 225.728106][ T27] [ 225.754642][ T27] [ 225.754642][ T27] Showing all locks held in the system: [ 225.767299][ T5773] hfsplus: unable to parse mount options [ 225.845523][ T1075] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 225.868624][ T5772] loop3: detected capacity change from 0 to 764 [ 225.877508][ T27] 1 lock held by khungtaskd/27: [ 225.882415][ T5772] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 225.889336][ T5772] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.898697][ T5772] ISOFS: Interleaved files not (yet) supported. [ 225.905275][ T5772] ISOFS: File unit size != 0 for ISO file (1856). [ 225.913709][ T27] #0: ffffffff8c91fbe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 225.937429][ T27] 2 locks held by kworker/0:3/1075: [ 225.944890][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 225.961390][ T27] #1: ffffc900048efd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 225.978618][ T27] 2 locks held by getty/3324: [ 225.994774][ T27] #0: ffff88802999c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 226.009973][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 226.021871][ T27] 2 locks held by kworker/1:4/3575: [ 226.027504][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 226.044718][ T27] #1: ffffc90002e27d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 226.059521][ T27] 1 lock held by syz.0.81/3924: [ 226.064528][ T27] #0: ffff888062288320 (mapping.invalidate_lock#6){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 226.076219][ T27] 3 locks held by kworker/u4:15/4361: [ 226.081749][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 226.081822][ T27] #1: ffffc90003177d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 226.081874][ T27] #2: ffffffff8da31608 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 226.081928][ T27] 1 lock held by udevd/4367: [ 226.081940][ T27] #0: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 226.081996][ T27] 1 lock held by udevd/4460: [ 226.082011][ T27] 2 locks held by syz.0.572/5762: [ 226.082022][ T27] #0: ffffffff8da31608 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 226.082070][ T27] #1: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 226.082122][ T27] 1 lock held by syz.0.572/5763: [ 226.082158][ T27] [ 226.082164][ T27] ============================================= [ 226.082164][ T27] [ 226.082173][ T27] NMI backtrace for cpu 1 [ 226.082181][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 226.082200][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.082209][ T27] Call Trace: [ 226.082216][ T27] [ 226.082224][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 226.082241][ T27] ? console_trylock_spinning+0x259/0x3f0 [ 226.082262][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 226.082280][ T27] ? panic+0x860/0x860 [ 226.082304][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 226.082328][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 226.082346][ T27] ? __wake_up_klogd+0xd5/0x100 [ 226.082367][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 226.082386][ T27] ? _printk+0xd1/0x120 [ 226.082402][ T27] ? panic+0x860/0x860 [ 226.082418][ T27] ? __wake_up_klogd+0xcc/0x100 [ 226.082434][ T27] ? panic+0x860/0x860 [ 226.082452][ T27] ? __rcu_read_unlock+0x92/0x100 [ 226.082470][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 226.082488][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 226.082509][ T27] watchdog+0xe72/0xeb0 [ 226.082539][ T27] kthread+0x3f6/0x4f0 [ 226.082555][ T27] ? hungtask_pm_notify+0x50/0x50 [ 226.082571][ T27] ? kthread_blkcg+0xd0/0xd0 [ 226.082588][ T27] ret_from_fork+0x1f/0x30 [ 226.082616][ T27] [ 226.082622][ T27] Sending NMI from CPU 1 to CPUs 0: [ 226.082645][ C0] NMI backtrace for cpu 0 [ 226.082653][ C0] CPU: 0 PID: 15 Comm: rcu_preempt Not tainted 5.15.166-syzkaller #0 [ 226.082668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.082676][ C0] RIP: 0010:schedule_timeout+0x14c/0x300 [ 226.082695][ C0] Code: f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 5d bc 8c f7 48 c7 44 24 28 00 00 00 00 49 8d 7e 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 05 e8 3d bc 8c f7 48 c7 44 24 38 50 ef 6e 81 65 8b 1d 25 ae c4 [ 226.082707][ C0] RSP: 0018:ffffc90000d47ba0 EFLAGS: 00000246 [ 226.082719][ C0] RAX: 1ffff920001a8f7b RBX: ffff888017e4bb80 RCX: 0000000000000001 [ 226.082730][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a20 RDI: ffffc90000d47bd8 [ 226.082741][ C0] RBP: ffffc90000d47c90 R08: ffffffff8186dac0 R09: fffffbfff2d491bd [ 226.082751][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 226.082761][ C0] R13: 1ffff920001a8f74 R14: ffffc90000d47bc0 R15: 00000000ffffe271 [ 226.082771][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.082784][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.082795][ C0] CR2: 0000555557c045c8 CR3: 00000000288eb000 CR4: 00000000003526f0 [ 226.082807][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.082815][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.082825][ C0] Call Trace: [ 226.082829][ C0] [ 226.082834][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 226.082850][ C0] ? read_lock_is_recursive+0x10/0x10 [ 226.082866][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 226.082882][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 226.082904][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 226.082918][ C0] ? nmi_handle+0xf7/0x370 [ 226.082934][ C0] ? schedule_timeout+0x14c/0x300 [ 226.082948][ C0] ? default_do_nmi+0x62/0x150 [ 226.082964][ C0] ? exc_nmi+0xa8/0x100 [ 226.082977][ C0] ? end_repeat_nmi+0x16/0x31 [ 226.082992][ C0] ? trace_hardirqs_on+0x30/0x80 [ 226.083010][ C0] ? schedule_timeout+0x14c/0x300 [ 226.083025][ C0] ? schedule_timeout+0x14c/0x300 [ 226.083041][ C0] ? schedule_timeout+0x14c/0x300 [ 226.083060][ C0] [ 226.083064][ C0] [ 226.083069][ C0] ? console_conditional_schedule+0x40/0x40 [ 226.083089][ C0] ? prepare_to_swait_event+0x321/0x340 [ 226.083106][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 226.083123][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 226.083138][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 226.083154][ C0] ? rcu_gp_init+0xdae/0x1140 [ 226.083170][ C0] ? rcu_gp_init+0x1140/0x1140 [ 226.083187][ C0] ? finish_swait+0xc5/0x1d0 [ 226.083202][ C0] rcu_gp_kthread+0xa4/0x360 [ 226.083216][ C0] ? _raw_spin_unlock+0x40/0x40 [ 226.083232][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 226.083246][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 226.083264][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 226.083280][ C0] kthread+0x3f6/0x4f0 [ 226.083293][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 226.083307][ C0] ? kthread_blkcg+0xd0/0xd0 [ 226.083322][ C0] ret_from_fork+0x1f/0x30 [ 226.083342][ C0] [ 226.083737][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 226.083747][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 226.083764][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.083773][ T27] Call Trace: [ 226.083779][ T27] [ 226.083786][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 226.083812][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 226.083830][ T27] ? panic+0x860/0x860 [ 226.083859][ T27] panic+0x318/0x860 [ 226.083876][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 226.083895][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 226.083915][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 226.083935][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 226.083956][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 226.083973][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 226.083994][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 226.084015][ T27] watchdog+0xeb0/0xeb0 [ 226.084042][ T27] kthread+0x3f6/0x4f0 [ 226.084058][ T27] ? hungtask_pm_notify+0x50/0x50 [ 226.084075][ T27] ? kthread_blkcg+0xd0/0xd0 [ 226.084093][ T27] ret_from_fork+0x1f/0x30 [ 226.084122][ T27] [ 226.084318][ T27] Kernel Offset: disabled [ 226.731399][ T27] Rebooting in 86400 seconds..