last executing test programs: 38.197117919s ago: executing program 2 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x451a, 0x0, 0x0, &(0x7f00000002c0)) fdatasync(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000580)={r4}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x35d812cc1dcb2138, 0xffffffffffffffff, 0x3055d000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r9 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="a415c19264d5415b8ad79b4e41905a9e06d5e1690af85ad0bd5fbdc469b172ef0d8bd9eb709bd9dae7d55eba46b6e878c9ec399b2357001d3e4a2420986e109dfcdbc8bd0ca40a9498546581142240b19efd8dcf199eac0189af6308d62f775b16c2d4fd140f972ce8a032b36048a8a9eb30732b35f08ea3e376acacc6ee279e09df3652bbf98ac9ff0e1fde683bb4dcaf93d7a6ed2e8a1a85394d291ee50587892c7760e5703ffae3742bba125c4ee1bdd47bb6fc8dea4884b9806fbecbbc91159e827194900a22a0f3b167f74a79a86a71763a97c4d80f1eeed38d63a58ff300d79f7d47b72aeb90a2eb7e", @ANYRES16=r9, @ANYBLOB="00042bbd7000fbdbdf25210000000c0005000200aaaaaaaaaaaa09001f00706879330000000009001f0070687930000000000a0001007770616e"], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000000) 36.694178996s ago: executing program 2 (id=446): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x910cc3, 0x0, 0x8, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x100000, &(0x7f0000000440)=ANY=[], 0x4, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 36.388493854s ago: executing program 2 (id=448): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000800), 0x5005) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) stat(&(0x7f0000002600)='./file1\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000980)=[{0x0}, {&(0x7f0000001500)="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", 0xffc}], 0x2, 0x0, 0x0, 0x4810}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="df7b7988224ab50cd0c753e2b9ba5af9bd5ca22fd4ccfe581abbe8d70ad8d5f70a570bb9fce49a5a8c74a148f899cbd7d27e6250f17956a5ea81", 0x3a}], 0x1, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x800}}], 0x2, 0x4000001) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 30.844982171s ago: executing program 2 (id=469): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 29.86675445s ago: executing program 2 (id=473): socket$unix(0x1, 0x1, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRES16, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fb, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setgid(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getdents64(r1, &(0x7f0000002ec0)=""/4096, 0x1000) 28.490170956s ago: executing program 2 (id=478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000001840)='./file2\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 15.762878099s ago: executing program 3 (id=511): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x910cc3, 0x0, 0x8, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000540)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x4, 0x0, 0x0) rmdir(0x0) 14.598174526s ago: executing program 3 (id=514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000001840)='./file2\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 13.384433896s ago: executing program 0 (id=519): r0 = socket$inet6(0xa, 0x3, 0xa) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x64fa, @local, 0x7}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x86d2, 0x4) 13.384007327s ago: executing program 0 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000001"], 0x38}}, 0x0) 10.93334667s ago: executing program 0 (id=525): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000800), 0x5005) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) stat(&(0x7f0000002600)='./file1\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000980)=[{0x0}, {&(0x7f0000001500)="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", 0xffc}], 0x2, 0x0, 0x0, 0x4810}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="df7b7988224ab50cd0c753e2b9ba5af9bd5ca22fd4ccfe581abbe8d70ad8d5f70a570bb9fce49a5a8c74a148f899cbd7d27e6250f17956a5ea81", 0x3a}, {0x0}], 0x2, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x800}}], 0x2, 0x4000001) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 9.169491412s ago: executing program 3 (id=528): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc082, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x8905, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0xa4}, {0x6}]}) 8.20342267s ago: executing program 3 (id=531): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.941707644s ago: executing program 4 (id=533): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) 6.956381134s ago: executing program 3 (id=534): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) clock_adjtime(0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4) 6.899181349s ago: executing program 4 (id=535): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) lseek(r5, 0x8, 0x0) 6.114516401s ago: executing program 1 (id=536): syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x3b00050, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, 0x0) fsync(r3) 6.052260417s ago: executing program 3 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") creat(&(0x7f0000001840)='./file2\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 5.35319246s ago: executing program 4 (id=538): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xca, 0x0, 0x80b}}}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) 5.281302237s ago: executing program 0 (id=539): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@empty, @broadcast, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x6}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x84, 0x6, 0x0, @loopback, @multicast2}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x40, 0x100, 0x0, 0x0, {[@mss={0x2, 0x0, 0x5}, @mptcp=@remove_addr={0x1e, 0x0, 0x4, 0x0, "f7bf76c6c70dae59a0e64372d019fe55ac436cd56b37e882e9511fff5aabe371659d844f7ad106c217e4b85c4bac2bd95f671a94208827688d28c57ef8b67b4cbcf3975eecb74b23c20b2a899466e5f04d0d9f25b12641fd58cf32b6bc7b73d688a582af266dc3ef0db978a499879a8b463c293695ebfe2ab4c0769ab9d1e080746e9fcff70edb9fd60d10aca46347a28023d2ed8230c24ab5c6dd63ef83194957a1e17b105191b31b7476206fe625bc5cc11e575545818b77c328f5322104e9736561555c44a9ec3e0ec08b4dea84104401300a3e6872ef9a58c9"}, @exp_smc]}}}}}}}, 0x0) clock_gettime(0x0, 0x0) 5.144277969s ago: executing program 0 (id=540): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mm_compaction_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000540)=""/57, 0x39) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r8}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setregid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.03057058s ago: executing program 1 (id=541): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x38, 0x36, 0x34, 0x32, 0x38, 0x61, 0x63, 0x61, 0x32, 0x30, 0x66, 0x61, 0x36, 0x64, 0x66, 0x64]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x37}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) 2.244602114s ago: executing program 1 (id=542): ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffe58, &(0x7f0000000040)={0x0, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 2.063794851s ago: executing program 0 (id=543): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000006500)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000006c0)) 1.74437711s ago: executing program 4 (id=544): ftruncate(0xffffffffffffffff, 0x97a9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, '.\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x3a00ea60) 1.743744811s ago: executing program 1 (id=545): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syslog(0x2, 0xfffffffffffffffc, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f00000001c0)='./file0\x00') 555.866759ms ago: executing program 1 (id=546): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'vxcan1\x00'}) 169.799914ms ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc0105303, &(0x7f0000000500)) tkill(r1, 0x7) 391.92µs ago: executing program 4 (id=548): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(0xffffffffffffffff, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x664, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000714000/0x1000)=nil, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 0s ago: executing program 1 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=""/225, &(0x7f0000000040), &(0x7f0000000440), 0x3, r4}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): e # [ 52.043453][ T3655] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 52.072537][ T3655] EXT4-fs (loop3): 1 orphan inode deleted [ 52.099356][ T3655] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 52.127586][ T3614] usb 3-1: Using ep0 maxpacket: 16 [ 52.170484][ T3649] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 52.204012][ T3653] loop2: detected capacity change from 0 to 256 [ 53.040452][ T3657] sched: RT throttling activated [ 53.060293][ T24] Bluetooth: hci0: command 0x0419 tx timeout [ 53.084514][ T24] Bluetooth: hci4: command 0x0419 tx timeout [ 53.962058][ T3666] binder: 3656:3666 ioctl c0306201 200003c0 returned -22 [ 54.067955][ T24] Bluetooth: hci2: command 0x0419 tx timeout [ 54.101310][ T24] Bluetooth: hci1: command 0x0419 tx timeout [ 54.122547][ T24] Bluetooth: hci3: command 0x0419 tx timeout [ 54.235259][ T3614] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.279205][ T3670] loop0: detected capacity change from 0 to 256 [ 54.313255][ T3669] loop1: detected capacity change from 0 to 256 [ 54.324714][ T3614] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 54.334234][ T3614] usb 3-1: can't read configurations, error -71 [ 54.372819][ T3675] fuse: Bad value for 'fd' [ 54.378808][ T3677] loop4: detected capacity change from 0 to 128 [ 54.395794][ T3669] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 54.410140][ T3670] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.490270][ T3649] usb 2-1: device not accepting address 2, error -71 [ 54.512674][ T3677] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.614747][ T3677] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 54.779684][ T26] audit: type=1800 audit(1727515375.837:2): pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 54.814527][ T3689] exFAT-fs (loop1): hint_cluster is invalid (17) [ 56.537073][ T3703] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.772030][ T3686] Zero length message leads to an empty skb [ 56.868751][ T3711] loop1: detected capacity change from 0 to 256 [ 57.092696][ T3711] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 57.119283][ T3715] loop2: detected capacity change from 0 to 256 [ 57.312664][ T3715] FAT-fs (loop2): Directory bread(block 64) failed [ 57.331526][ T3715] FAT-fs (loop2): Directory bread(block 65) failed [ 57.356862][ T3715] FAT-fs (loop2): Directory bread(block 66) failed [ 57.423676][ T3715] FAT-fs (loop2): Directory bread(block 67) failed [ 58.184955][ T3715] FAT-fs (loop2): Directory bread(block 68) failed [ 58.191693][ T3715] FAT-fs (loop2): Directory bread(block 69) failed [ 59.048151][ T3715] FAT-fs (loop2): Directory bread(block 70) failed [ 59.054773][ T3715] FAT-fs (loop2): Directory bread(block 71) failed [ 59.061388][ T3715] FAT-fs (loop2): Directory bread(block 72) failed [ 59.069344][ T3715] FAT-fs (loop2): Directory bread(block 73) failed [ 59.724583][ T3723] binder: 3718:3723 ioctl c0306201 200003c0 returned -22 [ 60.087251][ T3727] fuse: Bad value for 'fd' [ 61.966867][ T3740] loop2: detected capacity change from 0 to 40427 [ 62.130470][ T3756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.882790][ T3740] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.915193][ T3740] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.022099][ T3761] loop1: detected capacity change from 0 to 128 [ 63.074153][ T3740] F2FS-fs (loop2): invalid crc value [ 63.203120][ T3740] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.165299][ T3779] loop4: detected capacity change from 0 to 256 [ 65.320538][ T3783] loop1: detected capacity change from 0 to 256 [ 65.430972][ T3779] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 65.450040][ T3783] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.537687][ T3785] binder: 3780:3785 ioctl c0306201 200003c0 returned -22 [ 66.414063][ T3796] fuse: Unknown parameter '0x0000000000000003' [ 67.806877][ T3812] loop0: detected capacity change from 0 to 256 [ 67.822644][ T3812] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.917709][ T3817] loop4: detected capacity change from 0 to 128 [ 68.484532][ T26] audit: type=1800 audit(1727515389.547:3): pid=3822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file1" dev="loop0" ino=1048632 res=0 errno=0 [ 68.509133][ T3822] exFAT-fs (loop0): hint_cluster is invalid (17) [ 68.670520][ T3820] loop2: detected capacity change from 0 to 128 [ 69.015466][ T3820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.039837][ T3820] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 69.093979][ T3829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.075421][ T3836] binder: 3830:3836 ioctl c0306201 200003c0 returned -22 [ 70.789083][ T3845] fuse: Unknown parameter '0x0000000000000003' [ 71.325846][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.882618][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.736483][ T3853] loop4: detected capacity change from 0 to 256 [ 72.800346][ T3855] loop1: detected capacity change from 0 to 256 [ 72.810270][ T3853] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 72.905563][ T3857] overlayfs: missing 'lowerdir' [ 72.938895][ T3855] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.420270][ T3872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.045987][ T3875] loop2: detected capacity change from 0 to 128 [ 76.248551][ T3880] loop3: detected capacity change from 0 to 256 [ 76.355090][ T3881] binder: 3876:3881 ioctl c0306201 200003c0 returned -22 [ 76.378000][ T1074] cfg80211: failed to load regulatory.db [ 76.750685][ T3880] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 77.050532][ T3888] fuse: Unknown parameter '0x0000000000000003' [ 77.305794][ T26] audit: type=1800 audit(1727515398.317:4): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="file1" dev="loop3" ino=1048654 res=0 errno=0 [ 77.377788][ T3893] exFAT-fs (loop3): hint_cluster is invalid (17) [ 77.869022][ T3896] loop4: detected capacity change from 0 to 128 [ 78.275642][ T3896] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.316825][ T3896] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 80.995738][ T3917] overlayfs: missing 'lowerdir' [ 81.479917][ T3922] loop2: detected capacity change from 0 to 256 [ 81.747481][ T3922] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.820052][ T3925] loop0: detected capacity change from 0 to 256 [ 84.063873][ T3925] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.715601][ T3939] fuse: Unknown parameter '0x0000000000000003' [ 84.888062][ T3941] loop1: detected capacity change from 0 to 256 [ 85.150555][ T3941] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 86.491592][ T3958] loop3: detected capacity change from 0 to 128 [ 86.770566][ T3958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.951474][ T3958] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 87.232319][ T3966] overlayfs: missing 'lowerdir' [ 87.287779][ T3969] loop0: detected capacity change from 0 to 128 [ 87.379595][ T3972] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.475747][ T3981] loop2: detected capacity change from 0 to 256 [ 88.541072][ T3981] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.564320][ T3983] fuse: Unknown parameter '0x0000000000000003' [ 92.025798][ T3991] loop3: detected capacity change from 0 to 256 [ 94.275320][ T3991] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.362834][ T4017] loop0: detected capacity change from 0 to 128 [ 94.378027][ T4016] fuse: Unknown parameter '0x0000000000000003' [ 94.507117][ T4019] loop2: detected capacity change from 0 to 256 [ 94.573927][ T4017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.595682][ T4017] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 94.678813][ T4027] loop1: detected capacity change from 0 to 256 [ 94.703037][ T4019] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 95.020308][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 96.356100][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.380018][ T4027] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 96.561287][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.721179][ T4025] device bridge_slave_0 entered promiscuous mode [ 97.070726][ T1074] Bluetooth: hci4: command 0x0409 tx timeout [ 97.101520][ T4043] exFAT-fs (loop1): hint_cluster is invalid (17) [ 97.386485][ T26] audit: type=1800 audit(1727515418.077:5): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=1048694 res=0 errno=0 [ 97.426028][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.433104][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.548683][ T4047] loop3: detected capacity change from 0 to 128 [ 97.564777][ T4025] device bridge_slave_1 entered promiscuous mode [ 97.583637][ T3573] syz-executor (3573) used greatest stack depth: 18840 bytes left [ 97.891535][ T4052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.198851][ T4059] binder: 4048:4059 ioctl c0306201 200003c0 returned -22 [ 99.497325][ T3697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.615387][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 99.727656][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.757026][ T4062] fuse: Unknown parameter 'fd0x0000000000000003' [ 99.774092][ T3697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.803183][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.297361][ T4073] loop3: detected capacity change from 0 to 128 [ 100.298050][ T4076] loop2: detected capacity change from 0 to 256 [ 100.326715][ T3697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.373570][ T4025] team0: Port device team_slave_0 added [ 100.382888][ T4025] team0: Port device team_slave_1 added [ 100.404314][ T4075] loop1: detected capacity change from 0 to 256 [ 100.443527][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.450698][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.484328][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.503726][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.510889][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.545351][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.581244][ T4076] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 100.593045][ T4073] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.701583][ T4075] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.241950][ T3697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.264803][ T4073] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 102.345436][ T3646] Bluetooth: hci4: command 0x040f tx timeout [ 104.418908][ T4025] device hsr_slave_0 entered promiscuous mode [ 104.425210][ T1074] Bluetooth: hci4: command 0x0419 tx timeout [ 104.513704][ T4025] device hsr_slave_1 entered promiscuous mode [ 104.550428][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.568246][ T4025] Cannot create hsr debugfs directory [ 104.766939][ T4098] loop3: detected capacity change from 0 to 256 [ 104.889278][ T4103] fuse: Unknown parameter 'fd0x0000000000000003' [ 105.374859][ T4098] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 105.403098][ T4109] loop1: detected capacity change from 0 to 128 [ 106.690098][ T26] audit: type=1800 audit(1727515427.557:6): pid=4117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="file1" dev="loop3" ino=1048716 res=0 errno=0 [ 108.063647][ T4140] loop2: detected capacity change from 0 to 256 [ 108.222317][ T4140] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.362696][ T4144] loop3: detected capacity change from 0 to 128 [ 108.575308][ T4144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.600107][ T4144] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 111.040098][ T4158] loop2: detected capacity change from 0 to 256 [ 111.185440][ T4163] fuse: Unknown parameter 'fd0x0000000000000003' [ 111.224352][ T4158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.618827][ T4025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.670125][ T4025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.767989][ T4025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.358329][ T4025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.408529][ T4180] loop0: detected capacity change from 0 to 128 [ 113.013445][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.100509][ T4192] loop1: detected capacity change from 0 to 256 [ 113.220666][ T4192] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 114.639628][ T4203] loop0: detected capacity change from 0 to 128 [ 114.751730][ T4206] loop2: detected capacity change from 0 to 256 [ 114.805575][ T4203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.369452][ T4203] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 115.436782][ T4206] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 117.075586][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.083613][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.290790][ T4215] exFAT-fs (loop2): hint_cluster is invalid (17) [ 117.310999][ T26] audit: type=1800 audit(1727515438.327:7): pid=4215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="file1" dev="loop2" ino=1048738 res=0 errno=0 [ 117.422895][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.506578][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.536016][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.556396][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.563494][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.602022][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.726639][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.774058][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.781187][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.796244][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.922833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.370716][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.432984][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.466673][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.512810][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.636926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.656166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.669212][ T4232] loop3: detected capacity change from 0 to 256 [ 118.699637][ T4025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.727981][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.752060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.764841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.774321][ T4232] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.794211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.816799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.834903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.871671][ T3697] device hsr_slave_0 left promiscuous mode [ 118.891370][ T3697] device hsr_slave_1 left promiscuous mode [ 118.910124][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.939245][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.960458][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.992638][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.007044][ T3697] device bridge_slave_1 left promiscuous mode [ 119.014707][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.042591][ T3697] device bridge_slave_0 left promiscuous mode [ 119.087120][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.155665][ T3697] device veth1_macvtap left promiscuous mode [ 119.170543][ T3697] device veth0_macvtap left promiscuous mode [ 119.183991][ T3697] device veth1_vlan left promiscuous mode [ 119.193144][ T3697] device veth0_vlan left promiscuous mode [ 121.047896][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 121.063656][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 121.099569][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.142690][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.242409][ T4249] binder: 4246:4249 ioctl c0306201 200003c0 returned -22 [ 121.809962][ T4251] loop3: detected capacity change from 0 to 256 [ 121.873756][ T3697] bond0 (unregistering): Released all slaves [ 121.934291][ T4251] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 121.958862][ T4255] loop2: detected capacity change from 0 to 256 [ 122.109247][ T4255] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 123.310078][ T26] audit: type=1800 audit(1727515444.357:8): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="file1" dev="loop2" ino=1048756 res=0 errno=0 [ 123.358985][ T4267] exFAT-fs (loop2): hint_cluster is invalid (17) [ 124.819033][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.841262][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.885371][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.951764][ T4286] loop3: detected capacity change from 0 to 256 [ 125.052502][ T4290] loop2: detected capacity change from 0 to 128 [ 125.077001][ T4286] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.391146][ T4290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.664317][ T4290] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.499105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.527144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.650695][ T4025] device veth0_vlan entered promiscuous mode [ 126.790817][ T4299] binder: 4295:4299 ioctl c0306201 200003c0 returned -22 [ 126.966248][ T4025] device veth1_vlan entered promiscuous mode [ 127.184678][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.205613][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.243506][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.261086][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.290034][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.349532][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.396034][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.415008][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.444753][ T4025] device veth0_macvtap entered promiscuous mode [ 127.454037][ T4025] device veth1_macvtap entered promiscuous mode [ 127.586018][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.606316][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.669431][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.879679][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.070007][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.268021][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.397524][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.425689][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.450694][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.482027][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.503798][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.349602][ T4322] loop1: detected capacity change from 0 to 256 [ 129.372635][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.420132][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.494534][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.529671][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.574406][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.613305][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.654226][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.696473][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.953696][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.125787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.146495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.155522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.164306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.184254][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.210474][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.227117][ T4322] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 130.259528][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.301202][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.411118][ T4337] loop2: detected capacity change from 0 to 128 [ 132.545960][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.577138][ T4337] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 132.676719][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683013][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936220][ T3809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.944265][ T3809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.460863][ T4357] binder: 4351:4357 ioctl c0306201 200003c0 returned -22 [ 133.599865][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.706204][ T3759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.755100][ T3759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.805101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.840625][ T4361] loop2: detected capacity change from 0 to 512 [ 134.444020][ T4361] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.485656][ T4368] overlayfs: missing 'lowerdir' [ 134.504697][ T4361] ext4 filesystem being mounted at /49/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 134.676538][ T4361] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.179: Directory hole found for htree leaf block 0 [ 134.857467][ T4361] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.179: Directory hole found for htree leaf block 0 [ 135.389566][ T4382] loop0: detected capacity change from 0 to 128 [ 135.452673][ T4384] loop4: detected capacity change from 0 to 256 [ 135.515272][ T4384] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 137.417702][ T4402] loop3: detected capacity change from 0 to 128 [ 137.596229][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.614729][ T4402] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 137.652876][ T4409] loop4: detected capacity change from 0 to 2048 [ 137.730159][ T4411] overlayfs: missing 'lowerdir' [ 138.294129][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.482778][ T4404] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.536207][ T4404] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 138.587727][ T4404] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.587727][ T4404] [ 138.597843][ T4404] EXT4-fs (loop4): Total free blocks count 0 [ 138.657060][ T4404] EXT4-fs (loop4): Free/Dirty block details [ 138.663728][ T4404] EXT4-fs (loop4): free_blocks=2415919104 [ 138.694191][ T4404] EXT4-fs (loop4): dirty_blocks=16 [ 138.724461][ T4404] EXT4-fs (loop4): Block reservation details [ 138.752312][ T4404] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 138.787614][ T3649] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.929624][ T4432] loop4: detected capacity change from 0 to 128 [ 140.842445][ T4438] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.129330][ T3649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.139289][ T4441] loop3: detected capacity change from 0 to 256 [ 141.143520][ T3649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.156352][ T3649] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.165907][ T3649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.189253][ T3649] usb 1-1: config 0 descriptor?? [ 141.214648][ T3649] usb 1-1: can't set config #0, error -71 [ 141.230883][ T3649] usb 1-1: USB disconnect, device number 2 [ 142.072592][ T4441] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 142.141512][ T4449] overlayfs: missing 'lowerdir' [ 142.153871][ T4451] loop2: detected capacity change from 0 to 256 [ 142.867534][ T4465] loop0: detected capacity change from 0 to 128 [ 142.920397][ T4467] 9pnet: Insufficient options for proto=fd [ 143.013212][ T4469] input: syz0 as /devices/virtual/input/input5 [ 143.162467][ T4465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.324275][ T4467] ptrace attach of "./syz-executor exec"[3567] was attempted by "./syz-executor exec"[4467] [ 143.371973][ T4465] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 143.504789][ T4471] overlayfs: overlapping lowerdir path [ 143.957166][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.195202][ T7] usb 4-1: device descriptor read/64, error -71 [ 144.274332][ T4457] loop4: detected capacity change from 0 to 40427 [ 144.394603][ T3615] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.484719][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.491671][ T4457] F2FS-fs (loop4): invalid crc value [ 144.551844][ T4457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.615496][ T4536] loop0: detected capacity change from 0 to 8192 [ 144.660591][ T4457] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 144.694521][ T3615] usb 2-1: Using ep0 maxpacket: 32 [ 144.712290][ T4457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.720117][ T7] usb 4-1: device descriptor read/64, error -71 [ 144.840116][ T3615] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 144.851174][ T7] usb usb4-port1: attempt power cycle [ 144.904731][ T3615] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 144.924335][ T3615] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.964448][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.293908][ T4517] ptrace attach of "./syz-executor exec"[3568] was attempted by "./syz-executor exec"[4517] [ 145.434157][ T4025] attempt to access beyond end of device [ 145.434157][ T4025] loop4: rw=524288, want=45072, limit=40427 [ 145.457529][ T4025] attempt to access beyond end of device [ 145.457529][ T4025] loop4: rw=0, want=45072, limit=40427 [ 145.504572][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.623010][ T3808] attempt to access beyond end of device [ 145.623010][ T3808] loop4: rw=2049, want=45120, limit=40427 [ 145.704609][ T7] usb 4-1: device descriptor read/8, error -71 [ 145.751435][ T4551] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.761309][ T4551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.775319][ T4548] kvm: emulating exchange as write [ 145.883975][ T4553] loop0: detected capacity change from 0 to 512 [ 145.925241][ T4553] ======================================================= [ 145.925241][ T4553] WARNING: The mand mount option has been deprecated and [ 145.925241][ T4553] and is ignored by this kernel. Remove the mand [ 145.925241][ T4553] option from the mount to silence this warning. [ 145.925241][ T4553] ======================================================= [ 145.994648][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.020041][ T4553] EXT4-fs (loop0): 1 orphan inode deleted [ 146.026422][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc=0x0000000000000002,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 146.124292][ T4553] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 146.173217][ T3808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.264736][ T7] usb 4-1: device not accepting address 5, error -71 [ 146.272932][ T7] usb usb4-port1: unable to enumerate USB device [ 146.353273][ T3808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.048932][ T3808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.111820][ T3808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.135585][ T4567] syz.0.214 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.212975][ T7] usb 2-1: USB disconnect, device number 4 [ 147.220704][ T4570] loop3: detected capacity change from 0 to 128 [ 147.383556][ T4570] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.390297][ T4574] loop2: detected capacity change from 0 to 256 [ 147.404703][ T4570] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 149.186481][ T4648] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.256925][ T4648] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.507676][ T26] audit: type=1326 audit(1727515470.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d33c7ff9 code=0x7ffc0000 [ 149.511935][ T4657] loop1: detected capacity change from 0 to 512 [ 149.596419][ T26] audit: type=1326 audit(1727515470.607:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fe0d33c7ff9 code=0x7ffc0000 [ 149.620489][ T26] audit: type=1326 audit(1727515470.617:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d33c7ff9 code=0x7ffc0000 [ 149.671199][ T4657] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.226: casefold flag without casefold feature [ 149.690814][ T4657] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.226: couldn't read orphan inode 15 (err -117) [ 149.714719][ T3649] Bluetooth: hci4: command 0x0409 tx timeout [ 149.729448][ T4669] 9pnet: Insufficient options for proto=fd [ 149.741043][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.812749][ T4673] loop2: detected capacity change from 0 to 256 [ 149.848796][ T4577] chnl_net:caif_netlink_parms(): no params data found [ 149.909126][ T4673] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.280824][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.432412][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.445539][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.524788][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 150.665431][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.722201][ T4577] device bridge_slave_0 entered promiscuous mode [ 150.813104][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 150.935415][ T4577] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.942541][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.950667][ T4577] device bridge_slave_1 entered promiscuous mode [ 150.967342][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 151.000982][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.022003][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.092786][ T4695] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 151.145307][ T4669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.172435][ T4577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.186503][ T24] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 151.220069][ T4577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.370871][ T4577] team0: Port device team_slave_0 added [ 151.383740][ T4577] team0: Port device team_slave_1 added [ 151.421005][ T4707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.453283][ T4707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.468127][ T4672] process 'syz.3.228' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 151.503942][ T4577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.512793][ T4577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.554433][ T3646] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.584436][ T4577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.629962][ T3808] device hsr_slave_0 left promiscuous mode [ 151.644123][ T3808] device hsr_slave_1 left promiscuous mode [ 151.659457][ T3808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.670467][ T3808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.691891][ T3808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.709742][ T3808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.735402][ T3808] device bridge_slave_1 left promiscuous mode [ 151.763556][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.787044][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 151.813226][ T3808] device bridge_slave_0 left promiscuous mode [ 151.831267][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.840732][ T24] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 151.904542][ T3646] usb 2-1: Using ep0 maxpacket: 16 [ 152.055535][ T3646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.113162][ T24] usb 4-1: USB disconnect, device number 6 [ 152.400292][ T3646] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.464545][ T3646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.484505][ T3646] usb 2-1: Product: syz [ 152.494660][ T3646] usb 2-1: Manufacturer: syz [ 152.505126][ T3646] usb 2-1: SerialNumber: syz [ 152.560228][ T3646] usb 2-1: config 0 descriptor?? [ 152.602169][ T3808] device veth1_macvtap left promiscuous mode [ 152.626452][ T3808] device veth0_macvtap left promiscuous mode [ 152.632535][ T3808] device veth1_vlan left promiscuous mode [ 152.637326][ T3646] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.669445][ T3808] device veth0_vlan left promiscuous mode [ 152.675857][ T3646] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 152.933266][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 153.193353][ T3808] team0 (unregistering): Port device team_slave_1 removed [ 153.253988][ T3808] team0 (unregistering): Port device team_slave_0 removed [ 153.274882][ T3646] em28xx 2-1:0.0: chip ID is em28178 [ 153.360047][ T3808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.437364][ T3808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.551907][ T3808] bond0 (unregistering): Released all slaves [ 153.613574][ T4577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.622944][ T4577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.625500][ T3646] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.650427][ T4577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.665448][ T3646] em28xx 2-1:0.0: board has no eeprom [ 153.745377][ T4730] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.794590][ T3646] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.802434][ T3646] em28xx 2-1:0.0: dvb set to bulk mode. [ 153.845695][ T24] em28xx 2-1:0.0: Binding DVB extension [ 153.883978][ T4734] loop2: detected capacity change from 0 to 256 [ 153.884416][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 153.890830][ T3646] usb 2-1: USB disconnect, device number 5 [ 153.907804][ T4577] device hsr_slave_0 entered promiscuous mode [ 153.945339][ T3646] em28xx 2-1:0.0: Disconnecting em28xx [ 153.951942][ T4577] device hsr_slave_1 entered promiscuous mode [ 153.970559][ T4734] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.982447][ T4577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.021711][ T4577] Cannot create hsr debugfs directory [ 154.029591][ T24] em28xx 2-1:0.0: Registering input extension [ 154.033271][ T4739] overlayfs: missing 'lowerdir' [ 154.443853][ T4757] loop3: detected capacity change from 0 to 256 [ 154.474631][ T24] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 154.483343][ T24] Registered IR keymap rc-empty [ 154.505180][ T24] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 154.521192][ T24] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 154.636252][ T24] em28xx 2-1:0.0: Input extension successfully initialized [ 154.792638][ T4757] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 154.823653][ T3646] em28xx 2-1:0.0: Closing input extension [ 155.311418][ T3646] em28xx 2-1:0.0: Freeing device [ 155.316529][ T26] audit: type=1800 audit(1727515476.377:12): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.251" name="file1" dev="loop3" ino=1048817 res=0 errno=0 [ 155.348781][ T4767] exFAT-fs (loop3): hint_cluster is invalid (17) [ 155.684208][ T4774] loop2: detected capacity change from 0 to 128 [ 155.704523][ T3646] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 155.959289][ T3649] Bluetooth: hci4: command 0x0419 tx timeout [ 156.116425][ T4786] overlayfs: missing 'lowerdir' [ 156.251856][ T3646] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 156.286840][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.315842][ T4577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.358397][ T4577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.415993][ T4577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.454070][ T3646] usb 2-1: config 0 descriptor?? [ 156.460374][ T4801] loop2: detected capacity change from 0 to 256 [ 156.495520][ T4577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.520939][ T3646] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 156.697626][ T4801] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.420616][ T4577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.497569][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.550389][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.615360][ T4577] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.700414][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.726964][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.785629][ T4823] loop2: detected capacity change from 0 to 256 [ 157.796436][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.803588][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.012896][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.039040][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.049042][ T4823] FAT-fs (loop2): Directory bread(block 64) failed [ 158.058053][ T4823] FAT-fs (loop2): Directory bread(block 65) failed [ 158.074083][ T4823] FAT-fs (loop2): Directory bread(block 66) failed [ 158.089272][ T4823] FAT-fs (loop2): Directory bread(block 67) failed [ 158.105635][ T4823] FAT-fs (loop2): Directory bread(block 68) failed [ 158.120617][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.137645][ T4823] FAT-fs (loop2): Directory bread(block 69) failed [ 158.153907][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.161048][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.166345][ T4823] FAT-fs (loop2): Directory bread(block 70) failed [ 158.191158][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.216733][ T4823] FAT-fs (loop2): Directory bread(block 71) failed [ 158.220428][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.247062][ T4823] FAT-fs (loop2): Directory bread(block 72) failed [ 158.257498][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.257724][ T4823] FAT-fs (loop2): Directory bread(block 73) failed [ 158.316658][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.358594][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 158.424949][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 158.431309][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 158.437570][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.443993][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.450506][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.457009][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.463601][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.470073][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.476574][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.482991][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.489500][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.495948][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.502411][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.508877][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.515376][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.521872][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.528390][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.534833][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.541292][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.547757][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.554243][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.560699][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.567198][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.573607][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.580124][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.586579][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.593040][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.599503][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.605999][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.612408][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.618918][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 158.625371][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 158.631921][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.639768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.647653][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.655505][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.663354][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.671295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.679219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.687070][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.694960][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.702764][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.710675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.718605][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.726528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.734336][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.742257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.750200][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.758172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.766028][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.773877][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.781735][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.789623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.797474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.805874][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.813681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.821586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.829421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.837319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.845161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.853023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 158.860906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 158.891332][ T4823] attempt to access beyond end of device [ 158.891332][ T4823] loop2: rw=524288, want=1196, limit=256 [ 158.912222][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.914599][ T4823] attempt to access beyond end of device [ 158.914599][ T4823] loop2: rw=0, want=1196, limit=256 [ 158.925834][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.939752][ T26] audit: type=1800 audit(1727515480.007:13): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.267" name="file1" dev="loop2" ino=1048837 res=0 errno=0 [ 158.983952][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.002166][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.020974][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.043865][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.077477][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.103522][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.285851][ T4858] loop3: detected capacity change from 0 to 8 [ 159.341853][ T4852] loop2: detected capacity change from 0 to 2048 [ 159.374582][ T3646] usb 2-1: Detected FT8U232AM [ 159.385351][ T3646] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.447343][ T4852] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 159.484254][ T3646] usb 2-1: USB disconnect, device number 6 [ 159.538257][ T3646] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.567849][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.574894][ T3646] ftdi_sio 2-1:0.0: device disconnected [ 159.604832][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.660995][ T4577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.766838][ T4870] loop1: detected capacity change from 0 to 256 [ 159.839742][ T4870] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.288600][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.289158][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.430936][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.431645][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.432479][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.433002][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.434192][ T4577] device veth0_vlan entered promiscuous mode [ 160.475535][ T4577] device veth1_vlan entered promiscuous mode [ 161.263850][ T4577] device veth0_macvtap entered promiscuous mode [ 161.267666][ T4577] device veth1_macvtap entered promiscuous mode [ 161.277161][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.277181][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.277190][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.277202][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.277211][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.277222][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.277231][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.277242][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.278281][ T4577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.280435][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.280452][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.280462][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.280474][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.280483][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.280495][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.280504][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.280516][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.281399][ T4577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.283919][ T4577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.283949][ T4577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.283974][ T4577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.284000][ T4577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.400850][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.401477][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.402005][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.402543][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.403079][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.403589][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.404128][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.405613][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.406191][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.407240][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.477438][ T4912] loop0: detected capacity change from 0 to 512 [ 161.510078][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.510132][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.512928][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.541682][ T4912] EXT4-fs (loop0): Ignoring removed bh option [ 161.579555][ T4912] EXT4-fs error (device loop0): __ext4_iget:4872: inode #15: block 1803188595: comm syz.0.286: invalid block [ 161.587498][ T4912] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.286: couldn't read orphan inode 15 (err -117) [ 161.587865][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,noload,bh,noload,data_err=ignore,nojournal_checksum,barrier,,errors=continue. Quota mode: none. [ 161.664714][ T4912] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 161.740648][ T4529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.740703][ T4529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.743461][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.304567][ T3613] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.544548][ T3613] usb 5-1: Using ep0 maxpacket: 16 [ 162.805520][ T4512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.834580][ T3613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.191834][ T4512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.254658][ T3613] usb 5-1: config 80 has an invalid interface number: 193 but max is 0 [ 163.280007][ T3613] usb 5-1: config 80 has no interface number 0 [ 163.292673][ T3613] usb 5-1: config 80 interface 193 altsetting 11 bulk endpoint 0xC has invalid maxpacket 80 [ 163.305306][ T3613] usb 5-1: config 80 interface 193 altsetting 11 has an invalid endpoint with address 0x0, skipping [ 163.316808][ T3613] usb 5-1: config 80 interface 193 has no altsetting 0 [ 163.348821][ T4512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.436686][ T4512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.458550][ T26] audit: type=1326 audit(1727515484.527:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.3.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0d33c7ff9 code=0x0 [ 163.481406][ T3613] usb 5-1: New USB device found, idVendor=bb6e, idProduct=e7e8, bcdDevice=86.7f [ 163.574717][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.582738][ T3613] usb 5-1: Product: syz [ 163.587005][ T3613] usb 5-1: Manufacturer: syz [ 163.592392][ T3613] usb 5-1: SerialNumber: syz [ 163.624763][ T4936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.866483][ T24] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 163.879837][ T24] Bluetooth: hci3: Injecting HCI hardware error event [ 164.127929][ T3585] Bluetooth: hci3: hardware error 0x00 [ 164.436922][ T4936] loop4: detected capacity change from 0 to 256 [ 164.578422][ T4936] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 164.589368][ T5000] loop2: detected capacity change from 0 to 256 [ 164.645369][ T5000] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.030981][ T3613] usb 5-1: USB disconnect, device number 2 [ 165.217257][ T4990] chnl_net:caif_netlink_parms(): no params data found [ 165.236948][ T5025] loop3: detected capacity change from 0 to 128 [ 165.280209][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.294968][ T5025] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 165.376154][ T4577] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 165.390056][ T4577] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 165.417345][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.430513][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.442231][ T4990] device bridge_slave_0 entered promiscuous mode [ 165.536680][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.543971][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.560190][ T4990] device bridge_slave_1 entered promiscuous mode [ 165.663956][ T5035] loop2: detected capacity change from 0 to 512 [ 165.766943][ T4990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.787383][ T5035] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.847370][ T4990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.864632][ T3646] Bluetooth: hci2: command 0x0409 tx timeout [ 165.898351][ T5035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.098765][ T5035] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.310: corrupted inode contents [ 166.158457][ T5035] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #2: comm syz.2.310: mark_inode_dirty error [ 166.415237][ T4990] team0: Port device team_slave_0 added [ 166.799560][ T5035] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.310: corrupted inode contents [ 166.846126][ T4990] team0: Port device team_slave_1 added [ 166.960806][ T5061] loop1: detected capacity change from 0 to 128 [ 167.062528][ T4512] device hsr_slave_0 left promiscuous mode [ 167.069330][ T4512] device hsr_slave_1 left promiscuous mode [ 167.092601][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.172672][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.201488][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.233305][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.268269][ T5073] loop2: detected capacity change from 0 to 256 [ 167.276788][ T4512] device bridge_slave_1 left promiscuous mode [ 167.309570][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.331796][ T4512] device bridge_slave_0 left promiscuous mode [ 167.345955][ T5073] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.357083][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.381506][ T4512] device veth1_macvtap left promiscuous mode [ 167.387728][ T4512] device veth0_macvtap left promiscuous mode [ 167.396937][ T4512] device veth1_vlan left promiscuous mode [ 167.402885][ T4512] device veth0_vlan left promiscuous mode [ 167.847149][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 167.937202][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 167.979619][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.986331][ T3613] Bluetooth: hci2: command 0x041b tx timeout [ 168.162705][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.992251][ T4512] bond0 (unregistering): Released all slaves [ 169.067287][ T3613] Bluetooth: hci4: command 0x0409 tx timeout [ 169.167793][ T5104] loop2: detected capacity change from 0 to 256 [ 169.206984][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.214199][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.369796][ T4990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.400446][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.418126][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.447208][ T4990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.563936][ T4990] device hsr_slave_0 entered promiscuous mode [ 169.579398][ T4990] device hsr_slave_1 entered promiscuous mode [ 169.638018][ T5112] loop2: detected capacity change from 0 to 1024 [ 170.061381][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 170.091811][ T5122] loop2: detected capacity change from 0 to 512 [ 170.128781][ T5122] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 170.240236][ T5122] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.254094][ T5122] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 170.306651][ T5122] EXT4-fs (loop2): 1 truncate cleaned up [ 170.355458][ T5122] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,acl,noload,noinit_itable,usrjquota="acl,nomblk_io_submit,minixdf,,errors=continue. Quota mode: writeback. [ 170.584589][ T3613] Bluetooth: hci1: command 0x0406 tx timeout [ 170.975891][ T5122] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 171.057589][ T5062] chnl_net:caif_netlink_parms(): no params data found [ 171.144745][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 171.195538][ T26] audit: type=1326 audit(1727515492.267:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c15bf5ff9 code=0x0 [ 171.297347][ T5140] loop3: detected capacity change from 0 to 16 [ 171.313498][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 171.335707][ T5143] loop2: detected capacity change from 0 to 256 [ 171.389431][ T5140] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.423168][ T5143] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.628141][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.665729][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.683338][ T5062] device bridge_slave_0 entered promiscuous mode [ 171.692082][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.699309][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.708627][ T5062] device bridge_slave_1 entered promiscuous mode [ 171.764929][ T5062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.803906][ T5062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.858547][ T4990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.904200][ T4990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.932820][ T5062] team0: Port device team_slave_0 added [ 171.943363][ T5163] loop3: detected capacity change from 0 to 128 [ 171.964277][ T4990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.997975][ T5062] team0: Port device team_slave_1 added [ 172.016224][ T4990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.041312][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.082302][ T5163] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 172.114564][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 172.130301][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.155015][ T5169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.183184][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.228856][ T5062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.307847][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.324799][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.421443][ T5062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.438363][ T5163] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.340: dx entry: limit 0 != root limit 124 [ 172.496540][ T5163] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.340: Corrupt directory, running e2fsck is recommended [ 172.547993][ T5163] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.340: dx entry: limit 0 != root limit 124 [ 172.568977][ T5163] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.340: Corrupt directory, running e2fsck is recommended [ 172.592426][ T5062] device hsr_slave_0 entered promiscuous mode [ 172.614598][ T5163] EXT4-fs error (device loop3): ext4_add_entry:2472: inode #2: comm syz.3.340: Directory has corrupted htree index. [ 172.628808][ T5062] device hsr_slave_1 entered promiscuous mode [ 172.661367][ T5062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.701604][ T5062] Cannot create hsr debugfs directory [ 172.748449][ T3567] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz-executor: dx entry: limit 0 != root limit 124 [ 172.854748][ T3567] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 172.894612][ T3567] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 4: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 173.018841][ T4990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.038908][ T3567] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz-executor: dx entry: limit 0 != root limit 124 [ 173.084225][ T3567] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 173.224517][ T3576] Bluetooth: hci4: command 0x040f tx timeout [ 173.449687][ T5062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.132552][ T5206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.157043][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.165831][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.177521][ T4990] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.234513][ T5062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.317631][ T5213] loop2: detected capacity change from 0 to 256 [ 174.332872][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.359853][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.378878][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.385996][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.422290][ T5213] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.481548][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.499957][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.527453][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.557956][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.565076][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.612594][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.628231][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.771529][ T5062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.852043][ T5062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.911452][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.923630][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.933180][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.088875][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.334748][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 175.342330][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.537231][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.572194][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.611060][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.667478][ T5246] loop1: detected capacity change from 0 to 2048 [ 175.686216][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.716150][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.743017][ T5246] loop1: p2 < > [ 175.951559][ T5062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.971532][ T3903] udevd[3903]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 176.080278][ T5062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.092312][ T5258] loop1: detected capacity change from 0 to 2048 [ 176.163397][ T5062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.198946][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 176.234486][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 176.273131][ T4512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.301275][ T5062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.321917][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.338333][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.341016][ T5258] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.360: bg 0: block 234: padding at end of block bitmap is not set [ 176.372780][ T4512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.380875][ T5258] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 384 with error 28 [ 176.397548][ T5258] EXT4-fs (loop1): This should not happen!! Data will be lost [ 176.397548][ T5258] [ 176.409098][ T5258] EXT4-fs (loop1): Total free blocks count 0 [ 176.415284][ T5258] EXT4-fs (loop1): Free/Dirty block details [ 176.421448][ T5258] EXT4-fs (loop1): free_blocks=0 [ 176.427142][ T5258] EXT4-fs (loop1): dirty_blocks=400 [ 176.428723][ T4990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.432557][ T5258] EXT4-fs (loop1): Block reservation details [ 176.459558][ T5258] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 176.515998][ T4512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.644609][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.653307][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.676019][ T5294] loop1: detected capacity change from 0 to 164 [ 176.710537][ T4512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.737571][ T4990] device veth0_vlan entered promiscuous mode [ 176.767408][ T3615] Bluetooth: hci0: command 0x0409 tx timeout [ 176.802122][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.819033][ T5294] ISOFS: unable to read i-node block [ 176.827467][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.847749][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.860476][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.885181][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.892250][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.923027][ T5227] device bridge_slave_0 entered promiscuous mode [ 176.932130][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.939258][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.947519][ T5227] device bridge_slave_1 entered promiscuous mode [ 176.984076][ T4990] device veth1_vlan entered promiscuous mode [ 177.007430][ T5062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.069950][ T5306] loop2: detected capacity change from 0 to 128 [ 177.086313][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.125932][ T5062] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.179407][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.205586][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.225109][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.229975][ T5306] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 177.285807][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.316707][ T5227] team0: Port device team_slave_0 added [ 177.324603][ T5227] team0: Port device team_slave_1 added [ 177.348153][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.355570][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.396861][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.460259][ T4990] device veth0_macvtap entered promiscuous mode [ 177.585013][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.591977][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.628684][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.651847][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.734986][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.777332][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.784488][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.012505][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.047416][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.250787][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.357296][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.449140][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.456260][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.581926][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.706664][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.741080][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.762447][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.831741][ T5330] loop2: detected capacity change from 0 to 2048 [ 178.835744][ T3695] Bluetooth: hci0: command 0x041b tx timeout [ 178.860050][ T5330] loop2: p1 p2 p3 [ 178.860200][ T4990] device veth1_macvtap entered promiscuous mode [ 178.873225][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.885296][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.004837][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.340268][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 179.356130][ T4585] udevd[4585]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 179.380449][ T3586] udevd[3586]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 179.833363][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.872956][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.883511][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.918156][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.927724][ T5338] loop2: detected capacity change from 0 to 512 [ 179.938550][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.964204][ T5338] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: comm syz.2.370: inode #196608: comm syz.2.370: iget: illegal inode # [ 179.982316][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.997588][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.011583][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.026503][ T5338] EXT4-fs (loop2): Remounting filesystem read-only [ 180.029534][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.049278][ T5338] EXT4-fs (loop2): no journal found [ 180.052791][ T5062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.059537][ T5338] EXT4-fs (loop2): can't get journal size [ 180.072089][ T5338] EXT4-fs (loop2): failed to initialize system zone (-22) [ 180.081747][ T5062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.086758][ T5338] EXT4-fs (loop2): mount failed [ 180.124204][ T5227] device hsr_slave_0 entered promiscuous mode [ 180.132476][ T5227] device hsr_slave_1 entered promiscuous mode [ 180.148682][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.157716][ T5227] Cannot create hsr debugfs directory [ 180.180509][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.189509][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.225913][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.284807][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.299386][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.311074][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.320170][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.328997][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.342155][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.363070][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.384054][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.402207][ T5361] loop2: detected capacity change from 0 to 128 [ 180.408790][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.435704][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.446879][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.456617][ T5361] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.456941][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.475343][ T5361] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 180.477746][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.520631][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.684984][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.704103][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.759860][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.771681][ T4990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.787402][ T4990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.797551][ T4990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.806736][ T4990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.009509][ T3576] Bluetooth: hci0: command 0x040f tx timeout [ 181.042654][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.084398][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.763773][ T5062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.978846][ T5387] usb usb1: usbfs: process 5387 (syz.2.376) did not claim interface 0 before use [ 181.996911][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.996968][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.000289][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.102031][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.102081][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.105389][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.294088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.294700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.442074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.455658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.495088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.515183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.866506][ T5062] device veth0_vlan entered promiscuous mode [ 183.064755][ T3646] Bluetooth: hci0: command 0x0419 tx timeout [ 183.351830][ T5062] device veth1_vlan entered promiscuous mode [ 183.539330][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.628036][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.646440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.657236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.693646][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.760448][ T5062] device veth0_macvtap entered promiscuous mode [ 183.789470][ T5430] loop2: detected capacity change from 0 to 128 [ 183.829279][ T4512] device hsr_slave_0 left promiscuous mode [ 183.845401][ T4512] device hsr_slave_1 left promiscuous mode [ 183.862351][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.890019][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.900869][ T5430] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.904269][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.927728][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.934980][ T5430] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 184.068174][ T4512] device bridge_slave_1 left promiscuous mode [ 184.090728][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.145395][ T4512] device bridge_slave_0 left promiscuous mode [ 184.152060][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.255416][ T4512] device hsr_slave_0 left promiscuous mode [ 184.277120][ T4512] device hsr_slave_1 left promiscuous mode [ 184.283899][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.293291][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.302346][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.333729][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.334436][ T3612] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.381096][ T4512] device bridge_slave_1 left promiscuous mode [ 184.462566][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.491430][ T4512] device bridge_slave_0 left promiscuous mode [ 184.513877][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.553426][ T4512] device veth1_macvtap left promiscuous mode [ 184.559920][ T4512] device veth0_macvtap left promiscuous mode [ 184.566197][ T4512] device veth1_vlan left promiscuous mode [ 184.572011][ T4512] device veth0_vlan left promiscuous mode [ 184.578790][ T4512] device veth1_macvtap left promiscuous mode [ 184.586118][ T4512] device veth0_macvtap left promiscuous mode [ 184.592224][ T4512] device veth1_vlan left promiscuous mode [ 184.598254][ T4512] device veth0_vlan left promiscuous mode [ 185.524669][ T3612] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 185.551644][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.576733][ T3612] usb 1-1: config 0 descriptor?? [ 185.772941][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 185.954490][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 186.121165][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.370398][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.618602][ T4512] bond0 (unregistering): Released all slaves [ 186.833726][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 186.849217][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 186.867862][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.884261][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.983548][ T4512] bond0 (unregistering): Released all slaves [ 187.061645][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.074918][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.092289][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.103524][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.129161][ T5062] device veth1_macvtap entered promiscuous mode [ 187.180563][ T3612] asix 1-1:0.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 187.184517][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.222851][ T3612] usb 1-1: USB disconnect, device number 3 [ 187.235143][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.241529][ T3612] asix 1-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 187.254476][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.289269][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.327734][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.343433][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.373576][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.440865][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.455528][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.526142][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.545634][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.566132][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.620200][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.635724][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.669454][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.689648][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.711934][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.755793][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.791087][ T5062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.815919][ T5062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.842417][ T5062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.858564][ T5062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.951786][ T5520] loop2: detected capacity change from 0 to 128 [ 187.999410][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.026996][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.062480][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.070554][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.109985][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.113769][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.118085][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.156741][ T5520] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 188.185897][ T4089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.199753][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.221111][ T4089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.245420][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.280209][ T5528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 188.369892][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.378705][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.385813][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.393663][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.404260][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.447866][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.459951][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.489704][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.496814][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.522629][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.539848][ T5535] loop4: detected capacity change from 0 to 1024 [ 188.547838][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.558280][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.569007][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.577107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 188.600418][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.615511][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.627280][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.642194][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.671077][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.679229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 188.702266][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.727307][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.736893][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.754885][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.785131][ T3906] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 188.850886][ T3906] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 188.940789][ T3906] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.940789][ T3906] [ 188.977376][ T3906] EXT4-fs (loop4): Total free blocks count 0 [ 189.003960][ T3906] EXT4-fs (loop4): Free/Dirty block details [ 189.490405][ T3906] EXT4-fs (loop4): free_blocks=68451041280 [ 189.592552][ T3906] EXT4-fs (loop4): dirty_blocks=64 [ 189.600563][ T3906] EXT4-fs (loop4): Block reservation details [ 189.606960][ T3906] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 189.713020][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.738217][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.792575][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.878037][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.896006][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.992958][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.001779][ T5570] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.015635][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.081296][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.094159][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.315844][ T5577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.305365][ T5227] device veth0_vlan entered promiscuous mode [ 191.376935][ T5227] device veth1_vlan entered promiscuous mode [ 191.560731][ T5227] device veth0_macvtap entered promiscuous mode [ 191.676224][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.709228][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.751826][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.808191][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.856519][ T5601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.876517][ T5227] device veth1_macvtap entered promiscuous mode [ 191.885314][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.911384][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.928316][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.943105][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.024722][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.073334][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.128335][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.175335][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.223368][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.273409][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.308032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.324794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.370799][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.400288][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.461499][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.485800][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.514438][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.544378][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.554242][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.574414][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.596095][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.643682][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.666345][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.668921][ T5614] loop4: detected capacity change from 0 to 128 [ 192.681342][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.722472][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.828133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.847664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.058065][ T5619] syz.1.440 sent an empty control message without MSG_MORE. [ 193.200530][ T5621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.438616][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444963][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581691][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.685191][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.703661][ T5635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.749205][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.802339][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.829917][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.962046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.414587][ T3695] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.814827][ T3695] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.977623][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.039847][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.134454][ T3695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.192307][ T5657] loop1: detected capacity change from 0 to 128 [ 196.408751][ T3695] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 196.428494][ T3695] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 196.443276][ T3695] usb 1-1: Manufacturer: syz [ 196.454311][ T3695] usb 1-1: config 0 descriptor?? [ 197.049853][ T3695] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 197.338764][ T3695] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 197.483325][ T3695] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 197.545154][ T3695] usb 1-1: USB disconnect, device number 4 [ 200.438320][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 201.197822][ T5709] loop3: detected capacity change from 0 to 128 [ 201.501068][ T5719] loop2: detected capacity change from 0 to 256 [ 201.607260][ T5709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.630184][ T5709] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 201.671940][ T5719] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.988293][ T5735] loop4: detected capacity change from 0 to 256 [ 202.056559][ T5735] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 202.445855][ T5739] exFAT-fs (loop4): hint_cluster is invalid (17) [ 202.524538][ T26] audit: type=1800 audit(1727515523.507:16): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.476" name="file1" dev="loop4" ino=1048961 res=0 errno=0 [ 203.338304][ T5744] loop2: detected capacity change from 0 to 256 [ 203.492758][ T5744] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.794628][ T1074] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.009519][ T5759] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.124681][ T1074] usb 1-1: Using ep0 maxpacket: 8 [ 205.230621][ T5764] loop1: detected capacity change from 0 to 128 [ 206.034023][ T1074] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.268755][ T1074] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.445013][ T1074] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.488723][ T1074] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.511774][ T1074] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.523108][ T1074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.908700][ T1074] usb 1-1: GET_CAPABILITIES returned 0 [ 206.914211][ T1074] usbtmc 1-1:16.0: can't read capabilities [ 206.964547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 206.981484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 206.994376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 207.007514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 207.027808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 207.037310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 207.047412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 207.060063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 207.160151][ T24] usb 1-1: USB disconnect, device number 5 [ 207.175391][ T5752] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 207.182160][ T3612] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 207.704585][ T3612] usb 5-1: Using ep0 maxpacket: 32 [ 207.873019][ T3612] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 207.884375][ T3612] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping [ 207.929859][ T3612] usb 5-1: config 1 has no interface number 0 [ 207.974971][ T3612] usb 5-1: config 1 interface 4 altsetting 138 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 208.037781][ T5781] loop3: detected capacity change from 0 to 256 [ 208.041931][ T3612] usb 5-1: config 1 interface 4 altsetting 138 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.065254][ T3612] usb 5-1: config 1 interface 4 has no altsetting 0 [ 208.177183][ T5781] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.341326][ T3612] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0018, bcdDevice=91.00 [ 208.359738][ T3612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.387874][ T3612] usb 5-1: Product: syz [ 208.404755][ T3612] usb 5-1: Manufacturer: syz [ 208.426952][ T3612] usb 5-1: SerialNumber: syz [ 209.327292][ T3612] em28xx 5-1:1.4: New device syz syz @ 480 Mbps (0fd9:0018, interface 4, class 4) [ 209.347281][ T3612] em28xx 5-1:1.4: DVB interface 4 found: bulk [ 209.394049][ T5793] loop1: detected capacity change from 0 to 128 [ 209.509572][ T3612] em28xx 5-1:1.4: unknown em28xx chip ID (0) [ 209.744860][ T3612] em28xx 5-1:1.4: reading from i2c device at 0xa0 failed (error=-5) [ 209.772248][ T5793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.887607][ T5793] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 209.923725][ T3612] em28xx 5-1:1.4: board has no eeprom [ 210.224553][ T3612] em28xx 5-1:1.4: Identified as Elgato EyeTV Hybrid 2008 INT (card=97) [ 210.232837][ T3612] em28xx 5-1:1.4: dvb set to bulk mode. [ 210.321448][ T3612] usb 5-1: USB disconnect, device number 3 [ 210.361341][ T3612] em28xx 5-1:1.4: Disconnecting em28xx [ 210.433711][ T7] em28xx 5-1:1.4: Binding DVB extension [ 211.222087][ T7] DVB: Unable to find symbol drxk_attach() [ 211.254714][ T7] em28xx 5-1:1.4: Registering input extension [ 211.260996][ T3612] em28xx 5-1:1.4: Closing input extension [ 211.287659][ T3612] em28xx 5-1:1.4: Freeing device [ 212.402433][ T5824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.743176][ T5829] loop4: detected capacity change from 0 to 256 [ 212.822570][ T5829] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.809978][ T3612] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.833780][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 214.363948][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.474670][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.482725][ T5834] device bridge_slave_0 entered promiscuous mode [ 214.518601][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.534493][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.551664][ T5834] device bridge_slave_1 entered promiscuous mode [ 214.619007][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.634547][ T3612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.655696][ T3612] usb 4-1: no configurations [ 214.660310][ T3612] usb 4-1: can't read configurations, error -22 [ 214.698103][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.474662][ T3671] Bluetooth: hci5: command 0x0409 tx timeout [ 215.658362][ T5834] team0: Port device team_slave_0 added [ 215.738523][ T4629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.779657][ T5863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.164122][ T5871] binder: 5865:5871 ioctl c0306201 200003c0 returned -22 [ 216.249678][ T5834] team0: Port device team_slave_1 added [ 216.600331][ T4629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.775329][ T5877] loop3: detected capacity change from 0 to 256 [ 216.800202][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.807919][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.851628][ T5877] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.863968][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.878848][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.899538][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.932830][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.951334][ T4629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.688053][ T3671] Bluetooth: hci5: command 0x041b tx timeout [ 218.078358][ T5834] device hsr_slave_0 entered promiscuous mode [ 218.106207][ T5834] device hsr_slave_1 entered promiscuous mode [ 218.122439][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.249051][ T5834] Cannot create hsr debugfs directory [ 218.377434][ T4629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.715374][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 221.794887][ T3649] Bluetooth: hci5: command 0x0419 tx timeout [ 222.067194][ T4629] device hsr_slave_0 left promiscuous mode [ 222.073786][ T4629] device hsr_slave_1 left promiscuous mode [ 222.116897][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.125936][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.134225][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.150895][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.159984][ T4629] device bridge_slave_1 left promiscuous mode [ 222.221525][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.244576][ T4629] device bridge_slave_0 left promiscuous mode [ 222.250919][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.278594][ T4629] device veth1_macvtap left promiscuous mode [ 222.310211][ T4629] device veth0_macvtap left promiscuous mode [ 222.369011][ T26] audit: type=1326 audit(1727515543.427:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.3.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4210bff9 code=0x0 [ 222.427011][ T4629] device veth1_vlan left promiscuous mode [ 222.480805][ T4629] device veth0_vlan left promiscuous mode [ 225.317384][ T5980] loop3: detected capacity change from 0 to 256 [ 225.636161][ T5980] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 225.680742][ T4629] team0 (unregistering): Port device team_slave_1 removed [ 225.753435][ T4629] team0 (unregistering): Port device team_slave_0 removed [ 225.845284][ T4629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.892929][ T4629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.099432][ T4629] bond0 (unregistering): Released all slaves [ 229.026994][ T5994] binder: 5991:5994 ioctl c0306201 200003c0 returned -22 [ 229.369803][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.424853][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.497514][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.508224][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.613214][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.633431][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.751237][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.765164][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.021658][ T6009] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.214667][ T3649] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 230.231828][ T3649] Bluetooth: hci4: Injecting HCI hardware error event [ 230.262915][ T3585] Bluetooth: hci4: hardware error 0x00 [ 230.574851][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.634494][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.733133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.781284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.812137][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.819284][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.861657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.888536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.907875][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.915073][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.932002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.941280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.958461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.971208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.983849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.993625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.003169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.012157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.021633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.030769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.131502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.167621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.195202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.503386][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.559634][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.910194][ T6028] ODEBUG: Out of memory. ODEBUG disabled [ 232.910249][ T6028] [ 232.910253][ T6028] ====================================================== [ 232.910258][ T6028] WARNING: possible circular locking dependency detected [ 232.910264][ T6028] 5.15.167-syzkaller #0 Not tainted [ 232.910275][ T6028] ------------------------------------------------------ [ 232.910280][ T6028] syz.1.549/6028 is trying to acquire lock: [ 232.910290][ T6028] ffffffff8c7fc4b8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 232.910339][ T6028] [ 232.910339][ T6028] but task is already holding lock: [ 232.910343][ T6028] ffff888022b9ddb8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 232.910383][ T6028] [ 232.910383][ T6028] which lock already depends on the new lock. [ 232.910383][ T6028] [ 232.910387][ T6028] [ 232.910387][ T6028] the existing dependency chain (in reverse order) is: [ 232.910392][ T6028] [ 232.910392][ T6028] -> #3 (&trie->lock){....}-{2:2}: [ 232.910412][ T6028] lock_acquire+0x1db/0x4f0 [ 232.910427][ T6028] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.910446][ T6028] trie_delete_elem+0x90/0x690 [ 232.910463][ T6028] 0xffffffffa0014a48 [ 232.910475][ T6028] bpf_trace_run3+0x1d1/0x380 [ 232.910491][ T6028] __schedule+0x1e8d/0x45b0 [ 232.910506][ T6028] schedule+0x11b/0x1f0 [ 232.910519][ T6028] futex_wait_queue_me+0x25b/0x480 [ 232.910538][ T6028] futex_wait+0x2f8/0x740 [ 232.910555][ T6028] do_futex+0x1414/0x1810 [ 232.910572][ T6028] __se_sys_futex+0x407/0x490 [ 232.910589][ T6028] do_syscall_64+0x3b/0xb0 [ 232.910605][ T6028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.910623][ T6028] [ 232.910623][ T6028] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 232.910643][ T6028] lock_acquire+0x1db/0x4f0 [ 232.910657][ T6028] _raw_spin_lock_nested+0x2d/0x40 [ 232.910674][ T6028] raw_spin_rq_lock_nested+0x26/0x140 [ 232.910692][ T6028] task_fork_fair+0x5d/0x350 [ 232.910706][ T6028] sched_cgroup_fork+0x2d3/0x330 [ 232.910723][ T6028] copy_process+0x224a/0x3ef0 [ 232.910739][ T6028] kernel_clone+0x210/0x960 [ 232.910753][ T6028] kernel_thread+0x168/0x1e0 [ 232.910767][ T6028] rest_init+0x21/0x330 [ 232.910783][ T6028] start_kernel+0x48c/0x540 [ 232.910801][ T6028] secondary_startup_64_no_verify+0xb1/0xbb [ 232.910820][ T6028] [ 232.910820][ T6028] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 232.910841][ T6028] lock_acquire+0x1db/0x4f0 [ 232.910854][ T6028] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.910871][ T6028] try_to_wake_up+0xae/0x1300 [ 232.910889][ T6028] up+0x6e/0x90 [ 232.910904][ T6028] __up_console_sem+0x11a/0x1e0 [ 232.910919][ T6028] console_unlock+0x1145/0x12b0 [ 232.910934][ T6028] vprintk_emit+0xbf/0x150 [ 232.910948][ T6028] dev_vprintk_emit+0x2aa/0x330 [ 232.910963][ T6028] dev_printk_emit+0xd9/0x120 [ 232.910977][ T6028] _dev_notice+0x11e/0x170 [ 232.910990][ T6028] usb_get_bos_descriptor+0x749/0x980 [ 232.911010][ T6028] hub_port_init+0x1660/0x27d0 [ 232.911025][ T6028] hub_event+0x28ed/0x54c0 [ 232.911039][ T6028] process_one_work+0x8a1/0x10c0 [ 232.911056][ T6028] worker_thread+0xaca/0x1280 [ 232.911072][ T6028] kthread+0x3f6/0x4f0 [ 232.911086][ T6028] ret_from_fork+0x1f/0x30 [ 232.911102][ T6028] [ 232.911102][ T6028] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 232.911122][ T6028] validate_chain+0x1649/0x5930 [ 232.911137][ T6028] __lock_acquire+0x1295/0x1ff0 [ 232.911157][ T6028] lock_acquire+0x1db/0x4f0 [ 232.911171][ T6028] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.911188][ T6028] down_trylock+0x1c/0xa0 [ 232.911203][ T6028] __down_trylock_console_sem+0x105/0x250 [ 232.911220][ T6028] console_trylock_spinning+0x8a/0x3f0 [ 232.911235][ T6028] vprintk_emit+0xa6/0x150 [ 232.911249][ T6028] _printk+0xd1/0x120 [ 232.911266][ T6028] debug_objects_oom+0xb4/0x370 [ 232.911282][ T6028] debug_object_activate+0x42d/0x4e0 [ 232.911297][ T6028] kvfree_call_rcu+0xb6/0x8a0 [ 232.911312][ T6028] trie_update_elem+0x808/0xc00 [ 232.911329][ T6028] bpf_map_update_value+0x5d7/0x6c0 [ 232.911347][ T6028] generic_map_update_batch+0x54d/0x8b0 [ 232.911366][ T6028] bpf_map_do_batch+0x4d0/0x620 [ 232.911380][ T6028] __sys_bpf+0x55c/0x670 [ 232.911396][ T6028] __x64_sys_bpf+0x78/0x90 [ 232.911413][ T6028] do_syscall_64+0x3b/0xb0 [ 232.911428][ T6028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.911446][ T6028] [ 232.911446][ T6028] other info that might help us debug this: [ 232.911446][ T6028] [ 232.911451][ T6028] Chain exists of: [ 232.911451][ T6028] (console_sem).lock --> &rq->__lock --> &trie->lock [ 232.911451][ T6028] [ 232.911476][ T6028] Possible unsafe locking scenario: [ 232.911476][ T6028] [ 232.911480][ T6028] CPU0 CPU1 [ 232.911484][ T6028] ---- ---- [ 232.911487][ T6028] lock(&trie->lock); [ 232.911496][ T6028] lock(&rq->__lock); [ 232.911507][ T6028] lock(&trie->lock); [ 232.911517][ T6028] lock((console_sem).lock); [ 232.911526][ T6028] [ 232.911526][ T6028] *** DEADLOCK *** [ 232.911526][ T6028] [ 232.911530][ T6028] 2 locks held by syz.1.549/6028: [ 232.911539][ T6028] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 232.911578][ T6028] #1: ffff888022b9ddb8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 232.911617][ T6028] [ 232.911617][ T6028] stack backtrace: [ 232.911622][ T6028] CPU: 0 PID: 6028 Comm: syz.1.549 Not tainted 5.15.167-syzkaller #0 [ 232.911638][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.911654][ T6028] Call Trace: [ 232.911659][ T6028] [ 232.911664][ T6028] dump_stack_lvl+0x1e3/0x2d0 [ 232.911683][ T6028] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.911703][ T6028] ? print_circular_bug+0x12b/0x1a0 [ 232.911721][ T6028] check_noncircular+0x2f8/0x3b0 [ 232.911738][ T6028] ? read_lock_is_recursive+0x10/0x10 [ 232.911755][ T6028] ? add_chain_block+0x850/0x850 [ 232.911772][ T6028] ? lockdep_lock+0x11f/0x2a0 [ 232.911790][ T6028] ? mark_lock+0x98/0x340 [ 232.911804][ T6028] ? _find_first_zero_bit+0xcf/0xf0 [ 232.911826][ T6028] validate_chain+0x1649/0x5930 [ 232.911851][ T6028] ? reacquire_held_locks+0x660/0x660 [ 232.911867][ T6028] ? data_push_tail+0x693/0x700 [ 232.911887][ T6028] ? desc_read+0x3d0/0x3d0 [ 232.911905][ T6028] ? unwind_next_frame+0x1437/0x1fa0 [ 232.911926][ T6028] ? reacquire_held_locks+0x660/0x660 [ 232.911946][ T6028] ? mark_lock+0x98/0x340 [ 232.911963][ T6028] __lock_acquire+0x1295/0x1ff0 [ 232.911984][ T6028] lock_acquire+0x1db/0x4f0 [ 232.911998][ T6028] ? down_trylock+0x1c/0xa0 [ 232.912017][ T6028] ? vsnprintf+0x1c70/0x1c70 [ 232.912038][ T6028] ? read_lock_is_recursive+0x10/0x10 [ 232.912053][ T6028] ? memcpy+0x3c/0x60 [ 232.912070][ T6028] ? vsnprintf+0x1b93/0x1c70 [ 232.912090][ T6028] ? _prb_commit+0x30a/0x3e0 [ 232.912107][ T6028] ? prb_reserve+0x1240/0x1240 [ 232.912125][ T6028] _raw_spin_lock_irqsave+0xd1/0x120 [ 232.912143][ T6028] ? down_trylock+0x1c/0xa0 [ 232.912168][ T6028] ? _raw_spin_lock+0x40/0x40 [ 232.912186][ T6028] ? vprintk_store+0xf1b/0x1300 [ 232.912204][ T6028] down_trylock+0x1c/0xa0 [ 232.912223][ T6028] __down_trylock_console_sem+0x105/0x250 [ 232.912241][ T6028] ? printk_parse_prefix+0x2c0/0x2c0 [ 232.912257][ T6028] ? vprintk_emit+0xa6/0x150 [ 232.912272][ T6028] ? console_trylock+0x70/0x70 [ 232.912289][ T6028] ? stack_trace_save+0x1c0/0x1c0 [ 232.912307][ T6028] ? is_bpf_text_address+0x24f/0x260 [ 232.912326][ T6028] ? vprintk_emit+0xa6/0x150 [ 232.912341][ T6028] console_trylock_spinning+0x8a/0x3f0 [ 232.912359][ T6028] ? vprintk_emit+0x150/0x150 [ 232.912375][ T6028] ? __lock_acquire+0x1295/0x1ff0 [ 232.912395][ T6028] vprintk_emit+0xa6/0x150 [ 232.912412][ T6028] _printk+0xd1/0x120 [ 232.912433][ T6028] ? panic+0x860/0x860 [ 232.912451][ T6028] ? do_raw_spin_lock+0x14a/0x370 [ 232.912468][ T6028] ? __lock_acquire+0x1ff0/0x1ff0 [ 232.912487][ T6028] debug_objects_oom+0xb4/0x370 [ 232.912505][ T6028] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 232.912524][ T6028] ? debug_object_activate+0x4e0/0x4e0 [ 232.912544][ T6028] debug_object_activate+0x42d/0x4e0 [ 232.912562][ T6028] kvfree_call_rcu+0xb6/0x8a0 [ 232.912580][ T6028] ? call_rcu+0xa70/0xa70 [ 232.912596][ T6028] ? __kmalloc_node+0x199/0x390 [ 232.912613][ T6028] ? bpf_map_kmalloc_node+0xdb/0x160 [ 232.912631][ T6028] ? _raw_spin_lock+0x40/0x40 [ 232.912649][ T6028] ? longest_prefix_match+0x2db/0x640 [ 232.912671][ T6028] trie_update_elem+0x808/0xc00 [ 232.912697][ T6028] bpf_map_update_value+0x5d7/0x6c0 [ 232.912719][ T6028] generic_map_update_batch+0x54d/0x8b0 [ 232.912743][ T6028] ? rcu_read_unlock+0x90/0x90 [ 232.912763][ T6028] ? __fdget+0x191/0x220 [ 232.912780][ T6028] ? rcu_read_unlock+0x90/0x90 [ 232.912798][ T6028] bpf_map_do_batch+0x4d0/0x620 [ 232.912815][ T6028] __sys_bpf+0x55c/0x670 [ 232.912835][ T6028] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 232.912860][ T6028] ? syscall_enter_from_user_mode+0x2e/0x240 [ 232.912880][ T6028] ? lockdep_hardirqs_on+0x94/0x130 [ 232.912899][ T6028] __x64_sys_bpf+0x78/0x90 [ 232.912918][ T6028] do_syscall_64+0x3b/0xb0 [ 232.912934][ T6028] ? clear_bhb_loop+0x15/0x70 [ 232.912949][ T6028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.912970][ T6028] RIP: 0033:0x7f2c15bf5ff9 [ 232.912986][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.913000][ T6028] RSP: 002b:00007f2c1402c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.913016][ T6028] RAX: ffffffffffffffda RBX: 00007f2c15dae130 RCX: 00007f2c15bf5ff9 [ 232.913029][ T6028] RDX: 0000000000000038 RSI: 0000000020000680 RDI: 000000000000001a [ 232.913040][ T6028] RBP: 00007f2c15c68296 R08: 0000000000000000 R09: 0000000000000000 [ 232.913051][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.913061][ T6028] R13: 0000000000000000 R14: 00007f2c15dae130 R15: 00007ffcb132acf8 [ 232.913078][ T6028] [ 233.903951][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.921081][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.929630][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.944247][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.952313][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.960550][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.968555][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.977488][ T5834] device veth0_vlan entered promiscuous mode [ 233.987260][ T5834] device veth1_vlan entered promiscuous mode [ 234.000601][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.008839][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.017336][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.028724][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.038976][ T5834] device veth0_macvtap entered promiscuous mode [ 234.048033][ T5834] device veth1_macvtap entered promiscuous mode [ 234.059118][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.069634][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.079776][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.090207][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.100012][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.110618][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.121144][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.131624][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.142900][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.151627][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.159602][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.167497][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.175848][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.186059][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.196655][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.206478][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.216926][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.226938][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.237638][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.247754][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.258740][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.269335][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.279009][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.287771][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.296592][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.305356][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.315237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.323709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.566343][ T5834] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 234.592132][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.613728][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.621605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.630089][ T5834] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 234.665212][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.679580][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.687854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready