last executing test programs: 33.233371872s ago: executing program 3 (id=444): socket$unix(0x1, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe}) r1 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r2, 0xa1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xb, 0x7, {0x51, 0xa32, 0x2, {0x5, 0x7}, {0x2, 0x2}, @ramp={0x5134, 0x5, {0x2, 0x1, 0xf5d, 0x81}}}, {0x0, 0xa, 0xc9, {0x19a0, 0x1}, {0x8001, 0x8}, @cond=[{0xd6, 0x1000, 0x781e, 0x5, 0x543d, 0x5}, {0xf, 0x6, 0x3, 0x7fff, 0x1, 0x7}]}}) 30.593542216s ago: executing program 3 (id=454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="1d", 0x1) 30.382471564s ago: executing program 3 (id=455): socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000030"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 30.196276359s ago: executing program 3 (id=456): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x1040c) close(0xffffffffffffffff) setreuid(0xee01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r1, 0x402, 0x80000004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00') pread64(r2, &(0x7f0000000200)=""/171, 0xab, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000040000001868000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702c200f8ffffffb703000008000000b70400000200000085000000820000005fa00200040000009d38f4ff080010000000580000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026, r3}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00752abd7000ffdbdf25140000000e0001006e657464657673696d73296d300000080003000100000008000b000200000006001100030000000800150002000000beb984deaf1d74cafee1b5ad89d1a5b7cafb0759e8f7afd30e45cd6204d8de875e4ac2952da7af5d864a3fbd2544c43ce94e8d1e3fb14db882f5f1139709dc8b1237fe1bdf906724198a68deabbfeac2e0e7ff71b45357a42d0dbbee36a336ddf561028b82e3f6591d69580ce5daf1e9ac22ebd4afd78d7f1a4f06984b5e421e01ff453960d63fc0ff7e5519873968eb22eaa6e4"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x76, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f16d540b5199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336019cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b980680b6c4a000000002b43dcacc413bc8dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000001df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e00800100f8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b5333542d21a224f6eca447d36ad38affffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639bc1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e48bb4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf24285bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2abe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c61137abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c9d1a9fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) 25.840905249s ago: executing program 3 (id=466): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00') 24.362348314s ago: executing program 3 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0xa) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00"], 0x38}}, 0x0) 13.268233165s ago: executing program 2 (id=502): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x40040c0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12.177394718s ago: executing program 2 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.047586333s ago: executing program 2 (id=509): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(0x0, 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xff2e) 8.709769922s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @remote}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x181b, &(0x7f0000000300)={0x0, 0x33d2, 0x200, 0x0, 0x277, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000380)) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/27], 0x28}}], 0x1, 0x0) socket(0x840000000002, 0x0, 0xff) 7.570247748s ago: executing program 1 (id=520): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073109e00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6.681363443s ago: executing program 1 (id=522): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYRES32=0x0], 0x4, 0x1a2, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUiYpDBRuweF6oJndVB6fgFCEHDi6CQUMam2KippfBlha6SEGq/Rd0qqMKOokoOBcHwUHPpZs0Q3EQB4nk8kTwb/B5Dfe57wfunodvK+pGGeD3/mqDMgmHg3xE0MC0jDqlRvnazN9Nbo2CS2beNPnM5FS0vHK73m43l/IX8+T+KYAfSfe3il5wTNEXysjn/dVGXW6GDMp01HxIrkrhEU6NrveYKT3J0Rs4DNxNLiu64lbhULHXuVeMllfOLHbqC82F5p0gmLtQOlcqnQ+KtxbbzdIrxHsoiies4YVkQia8NVI1HuzoA8wK4rVU7EihT7rG1o5z+uRsH+XtMUB45/bJfNWtvLrKKbLXh5evcER4ihMyU2VCoUkOqiBX1Evx9Sf9M6XIrjvO2cbd9vzGNSW/0ttl2cuKv0vK9QkKPnPD1XCY92zEzMRUYrZjdr8xLW+Gp4z3qteHz+dmOs4JSHO/3ust+Wn4IDokcEOCHEwmv1PJvXLw1nxjgi/jF8uyLMuyLMuyLOs/8CcAAP//o/hj9Q==") chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/175, 0xaf) 5.799859058s ago: executing program 2 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_reply\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000080)={0xbd, 0x80000001}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.632269053s ago: executing program 4 (id=524): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f0000000780)=ANY=[@ANYBLOB="6c6f6e6761642c7569643d8a7415b9cc8141d0307db5fb5f7e490d9ca623362ad569b0c487007e9547038bbda1e7ca9cb8e553d61d44ff98e199cddc9d10a81919f68275fa", @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=10000000000000003,shad,gid=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00', @ANYRES64], 0x2, 0xc30, &(0x7f0000002740)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) keyctl$set_timeout(0xf, 0x0, 0x3) 4.680196543s ago: executing program 0 (id=525): syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 4.679515513s ago: executing program 2 (id=526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setpriority(0x1, 0x0, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fanotify_init(0x8, 0x0) r6 = gettid() capset(&(0x7f0000000000)={0x19980330, r6}, &(0x7f0000000040)={0x1, 0xb, 0x2, 0x1000, 0x101, 0xd}) 4.554460244s ago: executing program 1 (id=527): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x1040c) close(0xffffffffffffffff) setreuid(0xee01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r1, 0x402, 0x80000004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00') pread64(r2, &(0x7f0000000200)=""/171, 0xab, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000040000001868000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702c200f8ffffffb703000008000000b70400000200000085000000820000005fa00200040000009d38f4ff080010000000580000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026, r3}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x76, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f16d540b5199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336019cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b980680b6c4a000000002b43dcacc413bc8dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000001df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e00800100f8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b5333542d21a224f6eca447d36ad38affffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639bc1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e48bb4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf24285bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2abe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c61137abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c9d1a9fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) 3.902220649s ago: executing program 4 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) socket$inet6(0xa, 0x80803, 0x87) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) 3.566019408s ago: executing program 0 (id=529): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x2c, "aacc37d0c727eb324afa140fa84467389c5bdb5fee2df4e99a80a149f5806f488d6b0ec85e73c68553388f95"}, &(0x7f0000000080)=0x34) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0xf4, 0xe37f}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) gettid() r4 = socket(0x40000000002, 0x3, 0x2) read(r4, 0x0, 0x0) accept4$llc(r4, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x10, 0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 3.275816772s ago: executing program 1 (id=530): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) mount$9p_fd(0x0, 0x0, 0x0, 0x2000405, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="1d", 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.995016966s ago: executing program 4 (id=531): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0xfff1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.24641301s ago: executing program 1 (id=532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xf7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x20, 0x0, 0x10, {0x10, 0x8, "820027210246b7b1b5796f2aa083"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.200258294s ago: executing program 4 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @remote}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x181b, &(0x7f0000000300)={0x0, 0x33d2, 0x200, 0x0, 0x277, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000380)) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/27], 0x28}}], 0x1, 0x0) socket(0x840000000002, 0x0, 0xff) 2.168698396s ago: executing program 0 (id=534): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x1000) 810.401252ms ago: executing program 0 (id=535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$key(0xf, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x14bb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff], 0x0, 0x10202}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 809.467332ms ago: executing program 2 (id=536): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file1\x00', 0x3902120, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYRES32=r2], 0x6, 0x635, &(0x7f0000001340)="$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") getpid() syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x7fe2, 0x1, 0x7004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000040000002a0000"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/41, 0xfffffdd6}, {&(0x7f0000000080)=""/56, 0x41}, {&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/213, 0xec}], 0x4) 391.095337ms ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 82.221193ms ago: executing program 1 (id=538): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 500.48µs ago: executing program 0 (id=539): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x1040c) close(0xffffffffffffffff) setreuid(0xee01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r1, 0x402, 0x80000004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00') pread64(r2, &(0x7f0000000200)=""/171, 0xab, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000040000001868000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702c200f8ffffffb703000008000000b70400000200000085000000820000005fa00200040000009d38f4ff080010000000580000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026, r3}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x76, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) 0s ago: executing program 4 (id=540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1, 0x7a6, &(0x7f0000000a80)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xc9) kernel console output (not intermixed with test programs): 8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.900600][ T3988] [ 157.029507][ T4078] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,nogrpid,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: none. [ 157.127527][ T26] audit: type=1800 audit(1728612297.083:86): pid=4078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 157.225869][ T4094] loop0: detected capacity change from 0 to 512 [ 157.417431][ T4094] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.539149][ T4107] netlink: 'syz.1.42': attribute type 3 has an invalid length. [ 157.548388][ T4094] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 158.221392][ T4110] loop3: detected capacity change from 0 to 128 [ 158.325511][ T4112] netlink: 68 bytes leftover after parsing attributes in process `syz.0.41'. [ 158.340168][ T4112] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 158.350932][ T4112] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 158.360927][ T4112] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.41: Failed to acquire dquot type 0 [ 158.381028][ T4110] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 158.772718][ T4104] chnl_net:caif_netlink_parms(): no params data found [ 159.981724][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.988860][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.040977][ T4104] device bridge_slave_0 entered promiscuous mode [ 160.069717][ T4132] loop1: detected capacity change from 0 to 2048 [ 160.167043][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.185523][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.227276][ T4104] device bridge_slave_1 entered promiscuous mode [ 160.374747][ T4104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.420903][ T4113] chnl_net:caif_netlink_parms(): no params data found [ 160.447165][ T4104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.479755][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 160.585459][ T4104] team0: Port device team_slave_0 added [ 160.650538][ T4104] team0: Port device team_slave_1 added [ 160.712712][ T4113] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.739263][ T4113] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.760207][ T4113] device bridge_slave_0 entered promiscuous mode [ 160.798167][ T4113] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.828041][ T4113] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.860359][ T4113] device bridge_slave_1 entered promiscuous mode [ 160.867726][ T4104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.889011][ T4104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.969938][ T4104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.033167][ T4104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.048970][ T4104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.126204][ T4104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.205081][ T3652] Bluetooth: hci1: command 0x0409 tx timeout [ 161.238424][ T4113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.283408][ T4113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.310976][ T4132] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 161.482927][ T4140] futex_wake_op: syz.3.51 tries to shift op by -1; fix this program [ 161.516359][ T4104] device hsr_slave_0 entered promiscuous mode [ 161.536598][ T4104] device hsr_slave_1 entered promiscuous mode [ 161.553897][ T4113] team0: Port device team_slave_0 added [ 161.595530][ T4113] team0: Port device team_slave_1 added [ 161.610715][ T4144] loop3: detected capacity change from 0 to 128 [ 161.796178][ T4113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.804247][ T4144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 161.815757][ T4113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.837723][ T4144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.843052][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 161.860217][ T4113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.948246][ T4113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.007209][ T4113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.088043][ T4113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.094115][ T4152] Zero length message leads to an empty skb [ 162.292270][ T4113] device hsr_slave_0 entered promiscuous mode [ 162.299832][ T7] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 162.321807][ T7] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.335890][ T4113] device hsr_slave_1 entered promiscuous mode [ 162.345425][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 162.355724][ T4113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.365114][ T4113] Cannot create hsr debugfs directory [ 162.432595][ T4104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.549404][ T1078] Bluetooth: hci2: command 0x041b tx timeout [ 162.605783][ T4104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.641437][ T7] usb 1-1: string descriptor 0 read error: -22 [ 162.656370][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 162.689316][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.760681][ T4143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.778242][ T4104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.799836][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 162.873214][ T4104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.948839][ T26] audit: type=1326 audit(1728612302.903:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 163.010206][ T4113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.030078][ T3010] bcm5974 1-1:1.0: could not read from device [ 163.048350][ T7] usb 1-1: USB disconnect, device number 2 [ 163.061521][ T3010] bcm5974 1-1:1.0: could not read from device [ 163.075883][ T26] audit: type=1326 audit(1728612302.953:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 163.115924][ T3558] bcm5974 1-1:1.0: could not read from device [ 163.155820][ T4113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.261195][ T4113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.272975][ T1078] Bluetooth: hci1: command 0x041b tx timeout [ 163.371133][ T4113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.729812][ T4104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.832900][ T4104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.977008][ T4163] loop0: detected capacity change from 0 to 16 [ 164.593994][ T4104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.613743][ T4163] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 164.632814][ T4104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.639901][ T1078] Bluetooth: hci2: command 0x040f tx timeout [ 164.701885][ T4113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.760689][ T4113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.830923][ T4113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.967004][ T4113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.104142][ T4170] loop0: detected capacity change from 0 to 2048 [ 165.181292][ T4104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.205896][ T4172] loop3: detected capacity change from 0 to 256 [ 165.218486][ T4170] UDF-fs: bad mount option "nov" or missing value [ 165.242255][ T4104] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.374447][ T3011] Bluetooth: hci1: command 0x040f tx timeout [ 165.380719][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.388544][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.420569][ T4172] exfat: Unknown parameter ' [ 165.420569][ T4172] ' [ 167.617247][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 168.584092][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 168.794147][ T4113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.877098][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.939452][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.984197][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.991366][ T3932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.041863][ T4180] loop1: detected capacity change from 0 to 2048 [ 169.130581][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.189813][ T4180] UDF-fs: bad mount option "nov" or missing value [ 169.199652][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.239225][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.247742][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.254864][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.360256][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.589632][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.598380][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.104428][ T4113] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.207510][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.692022][ T4196] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 171.100820][ T4113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.200585][ T4113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.628571][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.655686][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.664899][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.671998][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.680443][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.689619][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.703669][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.882460][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.932139][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.031884][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.043189][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.055314][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.065740][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.072824][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.620435][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.721710][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.757531][ T4220] loop3: detected capacity change from 0 to 512 [ 173.765161][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.785727][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.815294][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.840346][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.855965][ T4220] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.887677][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.898366][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.915708][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.926231][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.936327][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.949372][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.990392][ T4220] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.011666][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.020069][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.031468][ T4104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.067353][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 174.076793][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.109793][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.117831][ T4220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.242897][ T4113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.263305][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.289276][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.323425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.341040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.404325][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.435134][ T26] audit: type=1326 audit(1728612314.393:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.468778][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.490829][ T4113] device veth0_vlan entered promiscuous mode [ 174.501299][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.527754][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.538140][ T26] audit: type=1326 audit(1728612314.413:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.567951][ T4113] device veth1_vlan entered promiscuous mode [ 174.588512][ T26] audit: type=1326 audit(1728612314.413:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.610951][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.631972][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.648092][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.658099][ T26] audit: type=1326 audit(1728612314.413:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.685793][ T4104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.700747][ T26] audit: type=1326 audit(1728612314.413:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.761602][ T4113] device veth0_macvtap entered promiscuous mode [ 174.780924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.788795][ T26] audit: type=1326 audit(1728612314.423:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.816014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.829955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.843666][ T4113] device veth1_macvtap entered promiscuous mode [ 174.852288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.871617][ T26] audit: type=1326 audit(1728612314.463:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.895925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.927109][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.939225][ T26] audit: type=1326 audit(1728612314.493:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 174.999020][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.008854][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.043772][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.072842][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.092116][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.107114][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.127045][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.149065][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.160336][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.172794][ T4113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.180632][ T4236] ALSA: seq fatal error: cannot create timer (-22) [ 175.185023][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.211520][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.243857][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.292105][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.302390][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.313202][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.326120][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.337578][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.361805][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.386297][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.411819][ T4113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.429667][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.449871][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.485513][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.514278][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.563222][ T4113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.602650][ T4113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.657271][ T4113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.697982][ T4113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.020790][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.046571][ T4248] fuse: Bad value for 'fd' [ 176.054869][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.100992][ T3932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.122923][ T3932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.239249][ T4254] loop3: detected capacity change from 0 to 128 [ 176.251229][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.305820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.316708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.356515][ T4104] device veth0_vlan entered promiscuous mode [ 176.393039][ T4104] device veth1_vlan entered promiscuous mode [ 176.944353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.959838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.970487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.999853][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.026389][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.367381][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.460929][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.635889][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.778717][ T4269] loop1: detected capacity change from 0 to 16 [ 177.807454][ T4269] erofs: (device loop1): mounted with root inode @ nid 36. [ 177.861653][ T4272] loop3: detected capacity change from 0 to 1024 [ 177.883737][ T4104] device veth0_macvtap entered promiscuous mode [ 178.037698][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.225468][ T4276] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 178.236796][ T4276] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 178.245896][ T4276] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 178.255088][ T4276] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 178.264329][ T4276] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 178.275211][ T4276] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 179.277161][ T4276] attempt to access beyond end of device [ 179.277161][ T4276] loop1: rw=524288, want=6536, limit=16 [ 179.288336][ T4276] attempt to access beyond end of device [ 179.288336][ T4276] loop1: rw=524288, want=34359736344, limit=16 [ 179.300056][ T4276] attempt to access beyond end of device [ 179.300056][ T4276] loop1: rw=524288, want=736, limit=16 [ 179.311111][ T4276] attempt to access beyond end of device [ 179.311111][ T4276] loop1: rw=524288, want=536576872, limit=16 [ 179.322881][ T4276] attempt to access beyond end of device [ 179.322881][ T4276] loop1: rw=524288, want=24, limit=16 [ 179.333810][ T4276] attempt to access beyond end of device [ 179.333810][ T4276] loop1: rw=524288, want=13478624040, limit=16 [ 179.766759][ T4104] device veth1_macvtap entered promiscuous mode [ 179.785776][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.797536][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.815880][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.854535][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.984956][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.999997][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.010299][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.021238][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.031443][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.822121][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.832106][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.842730][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.854689][ T4104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.947139][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 181.044114][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 181.085775][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.114476][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.188380][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.261942][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.278887][ T4298] loop2: detected capacity change from 0 to 128 [ 181.405668][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.497356][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.527829][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.556581][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.612384][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.656830][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.667028][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.677502][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.687483][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.697967][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.714190][ T4104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.733732][ T4104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.759705][ T4104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.789940][ T4298] "syz.2.86" (4298) uses obsolete ecb(arc4) skcipher [ 181.808421][ T4104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.836015][ T4104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.880857][ T26] audit: type=1326 audit(1728612321.783:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 182.410644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.458393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.509011][ T26] audit: type=1326 audit(1728612321.843:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 182.576842][ T3569] Bluetooth: hci6: link tx timeout [ 182.582450][ T3569] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.596006][ T26] audit: type=1326 audit(1728612321.843:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 182.651285][ T26] audit: type=1326 audit(1728612321.843:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 182.803254][ T26] audit: type=1326 audit(1728612321.843:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 182.888008][ T26] audit: type=1326 audit(1728612321.843:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 183.110995][ T26] audit: type=1326 audit(1728612321.843:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 183.177670][ T26] audit: type=1326 audit(1728612321.853:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 183.344670][ T4319] loop2: detected capacity change from 0 to 1024 [ 183.504658][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.539343][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.575125][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.587994][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.633121][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.671666][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.730016][ T4326] loop0: detected capacity change from 0 to 16 [ 183.740312][ T4246] libceph: connect (1)[c::]:6789 error -101 [ 183.965577][ T4326] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.260153][ T4246] libceph: mon0 (1)[c::]:6789 connect error [ 184.268761][ T4321] ceph: No mds server is up or the cluster is laggy [ 184.280772][ T3613] libceph: connect (1)[c::]:6789 error -101 [ 184.380337][ T4332] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 184.390592][ T4332] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 184.399732][ T4332] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 184.409254][ T4332] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 184.418896][ T4332] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 184.428871][ T4332] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 184.440037][ T4332] attempt to access beyond end of device [ 184.440037][ T4332] loop0: rw=524288, want=6536, limit=16 [ 184.451533][ T4332] attempt to access beyond end of device [ 184.451533][ T4332] loop0: rw=524288, want=34359736344, limit=16 [ 184.463679][ T4332] attempt to access beyond end of device [ 184.463679][ T4332] loop0: rw=524288, want=736, limit=16 [ 184.475041][ T4332] attempt to access beyond end of device [ 184.475041][ T4332] loop0: rw=524288, want=536576872, limit=16 [ 184.487511][ T4332] attempt to access beyond end of device [ 184.487511][ T4332] loop0: rw=524288, want=24, limit=16 [ 184.498785][ T4332] attempt to access beyond end of device [ 184.498785][ T4332] loop0: rw=524288, want=13478624040, limit=16 [ 184.717587][ T3613] libceph: mon0 (1)[c::]:6789 connect error [ 184.727706][ T4246] Bluetooth: hci6: command 0x0406 tx timeout [ 186.145547][ T4350] loop2: detected capacity change from 0 to 128 [ 186.349445][ T4350] "syz.2.98" (4350) uses obsolete ecb(arc4) skcipher [ 186.393563][ T3990] device hsr_slave_0 left promiscuous mode [ 186.434340][ T3990] device hsr_slave_1 left promiscuous mode [ 186.498029][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.554807][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.592318][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.621730][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.658128][ T3990] device bridge_slave_1 left promiscuous mode [ 186.698772][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.749809][ T3990] device bridge_slave_0 left promiscuous mode [ 186.791059][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.836095][ T3990] device hsr_slave_0 left promiscuous mode [ 186.856901][ T26] audit: type=1326 audit(1728612326.813:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 186.889071][ T3990] device hsr_slave_1 left promiscuous mode [ 186.920372][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.957172][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.976592][ T26] audit: type=1326 audit(1728612326.833:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.052673][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.092217][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.104153][ T26] audit: type=1326 audit(1728612326.833:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.145723][ T3990] device bridge_slave_1 left promiscuous mode [ 187.161958][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.174564][ T26] audit: type=1326 audit(1728612326.833:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.199565][ T3990] device bridge_slave_0 left promiscuous mode [ 187.214264][ T26] audit: type=1326 audit(1728612326.833:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.256030][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.295352][ T3990] device veth1_macvtap left promiscuous mode [ 187.301699][ T26] audit: type=1326 audit(1728612326.833:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.335434][ T3990] device veth0_macvtap left promiscuous mode [ 187.355067][ T3990] device veth1_vlan left promiscuous mode [ 187.378126][ T3990] device veth0_vlan left promiscuous mode [ 187.400972][ T26] audit: type=1326 audit(1728612326.833:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.428529][ T3990] device veth1_macvtap left promiscuous mode [ 187.448782][ T26] audit: type=1326 audit(1728612326.833:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.475166][ T3990] device veth0_macvtap left promiscuous mode [ 187.497530][ T3990] device veth1_vlan left promiscuous mode [ 187.518523][ T3990] device veth0_vlan left promiscuous mode [ 187.568078][ T26] audit: type=1326 audit(1728612326.833:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.568124][ T26] audit: type=1326 audit(1728612326.833:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 187.568162][ T26] audit: type=1326 audit(1728612326.883:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 188.634283][ T4383] loop2: detected capacity change from 0 to 1024 [ 190.235878][ T3990] team0 (unregistering): Port device team_slave_1 removed [ 190.278357][ T3990] team0 (unregistering): Port device team_slave_0 removed [ 190.307184][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.335347][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.621699][ T3990] bond0 (unregistering): Released all slaves [ 190.954537][ T3990] team0 (unregistering): Port device team_slave_1 removed [ 190.977103][ T3990] team0 (unregistering): Port device team_slave_0 removed [ 191.025284][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.092660][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.439691][ T3990] bond0 (unregistering): Released all slaves [ 191.465022][ T4408] loop1: detected capacity change from 0 to 128 [ 191.658200][ T4408] "syz.1.112" (4408) uses obsolete ecb(arc4) skcipher [ 194.003610][ T1392] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.015733][ T1392] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.551634][ T4454] loop2: detected capacity change from 0 to 2048 [ 195.754415][ T4454] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 195.935872][ T4461] loop3: detected capacity change from 0 to 1024 [ 198.347634][ T3574] Bluetooth: hci5: link tx timeout [ 198.353269][ T3574] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 198.362994][ T3574] Bluetooth: hci5: link tx timeout [ 198.368131][ T3574] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.886048][ T4506] loop2: detected capacity change from 0 to 1024 [ 200.236352][ T4514] loop2: detected capacity change from 0 to 2048 [ 200.850309][ T3011] Bluetooth: hci5: command 0x0406 tx timeout [ 200.905664][ T4514] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 200.921446][ T4522] loop1: detected capacity change from 0 to 128 [ 201.217270][ T4522] "syz.1.140" (4522) uses obsolete ecb(arc4) skcipher [ 202.654149][ T3574] Bluetooth: hci6: link tx timeout [ 202.659380][ T3574] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.667838][ T3574] Bluetooth: hci6: link tx timeout [ 202.673127][ T3574] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.923368][ T4546] kvm: pic: level sensitive irq not supported [ 202.925572][ T4546] kvm: pic: non byte read [ 202.949947][ T1078] Bluetooth: hci5: command 0x0406 tx timeout [ 203.031840][ T4546] kvm: pic: level sensitive irq not supported [ 203.031894][ T4546] kvm: pic: non byte read [ 203.101253][ T4556] loop2: detected capacity change from 0 to 1024 [ 204.320993][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 204.321009][ T26] audit: type=1326 audit(1728612344.283:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 204.855717][ T4564] loop2: detected capacity change from 0 to 2048 [ 204.901063][ T3652] Bluetooth: hci6: command 0x0406 tx timeout [ 204.985486][ T26] audit: type=1326 audit(1728612344.813:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.028491][ T4578] "syz.4.156" (4578) uses obsolete ecb(arc4) skcipher [ 205.173100][ T26] audit: type=1326 audit(1728612344.813:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.279872][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 205.370006][ T26] audit: type=1326 audit(1728612344.813:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.540675][ T26] audit: type=1326 audit(1728612344.813:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.738010][ T26] audit: type=1326 audit(1728612344.813:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.811791][ T26] audit: type=1326 audit(1728612344.833:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.834294][ T26] audit: type=1326 audit(1728612344.863:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.858447][ T26] audit: type=1326 audit(1728612344.863:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 205.889368][ T26] audit: type=1326 audit(1728612344.863:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 206.124738][ T4594] loop0: detected capacity change from 0 to 1024 [ 209.228421][ T4634] loop0: detected capacity change from 0 to 128 [ 209.231597][ T4628] kvm: pic: level sensitive irq not supported [ 209.265435][ T4628] kvm: pic: non byte read [ 209.409316][ T4628] kvm: pic: level sensitive irq not supported [ 209.409369][ T4628] kvm: pic: non byte read [ 209.424396][ T4634] "syz.0.172" (4634) uses obsolete ecb(arc4) skcipher [ 209.644385][ T4638] loop1: detected capacity change from 0 to 2048 [ 209.813388][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 210.248773][ T4650] loop0: detected capacity change from 0 to 1024 [ 210.312449][ T4648] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.457918][ T4648] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 212.531825][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 212.532970][ T26] audit: type=1326 audit(1728612352.493:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 212.776323][ T26] audit: type=1326 audit(1728612352.493:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 212.975124][ T26] audit: type=1326 audit(1728612352.493:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.195354][ T26] audit: type=1326 audit(1728612352.493:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.230739][ T3574] Bluetooth: hci0: link tx timeout [ 213.236247][ T3574] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.369000][ T26] audit: type=1326 audit(1728612352.493:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.482398][ T4686] kvm: pic: level sensitive irq not supported [ 213.482483][ T4686] kvm: pic: non byte read [ 213.503992][ T26] audit: type=1326 audit(1728612352.493:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.526077][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.533326][ T4686] kvm: pic: level sensitive irq not supported [ 213.533398][ T4686] kvm: pic: non byte read [ 213.687768][ T4697] loop1: detected capacity change from 0 to 2048 [ 213.689231][ T26] audit: type=1326 audit(1728612352.493:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.788336][ T26] audit: type=1326 audit(1728612352.493:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.810524][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.902902][ T26] audit: type=1326 audit(1728612352.493:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 213.925114][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.973417][ T4697] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 214.009619][ T26] audit: type=1326 audit(1728612352.493:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4aa14ff9 code=0x7ffc0000 [ 214.136276][ T4707] loop3: detected capacity change from 0 to 1024 [ 215.276498][ T4711] loop0: detected capacity change from 0 to 512 [ 215.286118][ T3652] Bluetooth: hci0: command 0x0406 tx timeout [ 215.879898][ T4711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.967992][ T4711] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 217.708536][ T4749] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.890670][ T4749] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 218.024860][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 218.024876][ T26] audit: type=1326 audit(1728612357.973:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.155075][ T4758] loop2: detected capacity change from 0 to 1024 [ 218.167975][ T26] audit: type=1326 audit(1728612357.973:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.398569][ T26] audit: type=1326 audit(1728612357.973:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.498228][ T26] audit: type=1326 audit(1728612357.973:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.528987][ T26] audit: type=1326 audit(1728612357.973:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.570005][ T26] audit: type=1326 audit(1728612357.973:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 218.862621][ T26] audit: type=1326 audit(1728612357.973:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 219.035628][ T26] audit: type=1326 audit(1728612357.973:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 219.229129][ T26] audit: type=1326 audit(1728612357.973:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 219.489302][ T26] audit: type=1326 audit(1728612357.973:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e08fdff9 code=0x7ffc0000 [ 220.871933][ T4793] loop1: detected capacity change from 0 to 128 [ 224.262746][ T4841] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.280627][ T4842] loop0: detected capacity change from 0 to 128 [ 224.378834][ T4841] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 224.550489][ T4848] "syz.0.225" (4848) uses obsolete ecb(arc4) skcipher [ 226.310436][ T4857] kvm: pic: non byte read [ 226.315049][ T4857] kvm: pic: non byte read [ 226.334525][ T4857] kvm: pic: non byte read [ 226.338631][ T4867] loop0: detected capacity change from 0 to 1024 [ 226.350104][ T4857] kvm: pic: non byte read [ 226.356387][ T4857] kvm: pic: non byte read [ 226.443221][ T4857] kvm: pic: non byte read [ 226.447988][ T4857] kvm: pic: non byte read [ 226.461851][ T4857] kvm: pic: non byte read [ 226.471071][ T4857] kvm: pic: non byte read [ 226.489498][ T4857] kvm: pic: non byte read [ 226.514431][ T4857] kvm: pic: single mode not supported [ 226.514451][ T4857] kvm: pic: level sensitive irq not supported [ 227.311698][ T4878] loop3: detected capacity change from 0 to 2048 [ 227.546417][ T4878] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 235.690945][ T4906] "syz.4.242" (4906) uses obsolete ecb(arc4) skcipher [ 237.012868][ T4917] loop0: detected capacity change from 0 to 1024 [ 237.396004][ T4919] capability: warning: `syz.4.246' uses 32-bit capabilities (legacy support in use) [ 237.663114][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.797032][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.998105][ T4933] loop1: detected capacity change from 0 to 2048 [ 238.010508][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.318732][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.549160][ T3613] Bluetooth: hci3: command 0x0409 tx timeout [ 238.939876][ T4933] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 238.978614][ T4907] chnl_net:caif_netlink_parms(): no params data found [ 239.361445][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.394303][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.455311][ T4907] device bridge_slave_0 entered promiscuous mode [ 239.489186][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.503266][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.518591][ T4907] device bridge_slave_1 entered promiscuous mode [ 239.665249][ T4907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.716891][ T4907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.433437][ T4907] team0: Port device team_slave_0 added [ 240.490088][ T4907] team0: Port device team_slave_1 added [ 241.011786][ T3619] Bluetooth: hci3: command 0x041b tx timeout [ 241.125963][ T4985] loop1: detected capacity change from 0 to 1024 [ 241.200745][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.213334][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.711748][ T4907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.811371][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.848192][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.979488][ T4907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.256250][ T5009] loop0: detected capacity change from 0 to 512 [ 242.264572][ T5005] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 242.289014][ T5005] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.261'. [ 242.304260][ T3569] Bluetooth: hci1: link tx timeout [ 242.310282][ T3569] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 242.423701][ T4907] device hsr_slave_0 entered promiscuous mode [ 242.461411][ T5010] picdev_read: 88 callbacks suppressed [ 242.461428][ T5010] kvm: pic: non byte read [ 242.474848][ T4907] device hsr_slave_1 entered promiscuous mode [ 242.489781][ T4907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.499010][ T4907] Cannot create hsr debugfs directory [ 242.545135][ T5010] kvm: pic: non byte read [ 242.558016][ T5010] kvm: pic: non byte read [ 242.562686][ T5010] kvm: pic: non byte read [ 242.567206][ T5010] kvm: pic: non byte read [ 242.571915][ T5010] kvm: pic: non byte read [ 242.576446][ T5010] kvm: pic: non byte read [ 242.581047][ T5010] kvm: pic: non byte read [ 242.585656][ T5010] kvm: pic: non byte read [ 242.593913][ T5010] kvm: pic: non byte read [ 242.608411][ T5010] kvm: pic: single mode not supported [ 242.608427][ T5010] kvm: pic: level sensitive irq not supported [ 242.657185][ T5009] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.695334][ T5009] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 243.100099][ T155] device hsr_slave_0 left promiscuous mode [ 243.437124][ T155] device hsr_slave_1 left promiscuous mode [ 243.459303][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.359805][ T3619] Bluetooth: hci3: command 0x040f tx timeout [ 244.388973][ T3613] Bluetooth: hci1: command 0x0406 tx timeout [ 244.417783][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.477330][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.526387][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.569836][ T155] device bridge_slave_1 left promiscuous mode [ 244.577300][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.193463][ T155] device bridge_slave_0 left promiscuous mode [ 245.209129][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.269401][ T155] device veth1_macvtap left promiscuous mode [ 245.294575][ T155] device veth0_macvtap left promiscuous mode [ 245.331310][ T155] device veth1_vlan left promiscuous mode [ 245.337139][ T155] device veth0_vlan left promiscuous mode [ 245.341781][ T5041] loop0: detected capacity change from 0 to 1024 [ 246.256995][ T5064] futex_wake_op: syz.1.274 tries to shift op by -1; fix this program [ 246.389067][ T1078] Bluetooth: hci3: command 0x0419 tx timeout [ 246.453387][ T155] team0 (unregistering): Port device team_slave_1 removed [ 246.468852][ T155] team0 (unregistering): Port device team_slave_0 removed [ 246.483712][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.504129][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.634197][ T155] bond0 (unregistering): Released all slaves [ 246.784561][ T5067] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 246.838842][ T5067] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.275'. [ 248.399290][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 248.555849][ T5085] loop3: detected capacity change from 0 to 2048 [ 248.804507][ T5085] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 248.910244][ T5097] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.986888][ T5097] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 249.415211][ T4907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.594745][ T4907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.796589][ T4907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.850425][ T4907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.205863][ T5124] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 250.241596][ T5124] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.286'. [ 250.544252][ T5129] futex_wake_op: syz.4.287 tries to shift op by -1; fix this program [ 250.654323][ T4907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.828042][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.600582][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.100790][ T4907] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.133323][ T5140] loop3: detected capacity change from 0 to 512 [ 252.155712][ T4907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.166336][ T4907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.306559][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.350862][ T5140] ======================================================= [ 252.350862][ T5140] WARNING: The mand mount option has been deprecated and [ 252.350862][ T5140] and is ignored by this kernel. Remove the mand [ 252.350862][ T5140] option from the mount to silence this warning. [ 252.350862][ T5140] ======================================================= [ 252.529842][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.555238][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.562369][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.601802][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.626837][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.658670][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.665810][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.713892][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.753422][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.803983][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.850607][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.914195][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.945599][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.966693][ T5137] loop3: detected capacity change from 0 to 512 [ 252.991525][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.020829][ T5137] EXT4-fs (loop3): Unrecognized mount option "mask=^MAY_READ" or missing value [ 253.039975][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.059230][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.079873][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.203105][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.254060][ T3569] Bluetooth: hci6: unexpected event for opcode 0x080c [ 253.288877][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.297670][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.428622][ T5153] loop1: detected capacity change from 0 to 2048 [ 253.477821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.510342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.571206][ T4907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.624929][ T5153] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 253.689855][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.699206][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.723760][ T4907] device veth0_vlan entered promiscuous mode [ 253.740934][ T4907] device veth1_vlan entered promiscuous mode [ 253.789907][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.840306][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.850442][ T5173] loop0: detected capacity change from 0 to 1024 [ 253.881773][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.932513][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.958559][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.029324][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.181601][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.597335][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.609543][ T4907] device veth0_macvtap entered promiscuous mode [ 254.657203][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.830846][ T4907] device veth1_macvtap entered promiscuous mode [ 254.864700][ T5181] loop3: detected capacity change from 0 to 512 [ 254.923002][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.968196][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.006552][ T5181] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.012499][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.017868][ T5181] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 255.028370][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.155133][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.199041][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.229154][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.279280][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.327075][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.369181][ T5187] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 255.393917][ T5201] futex_wake_op: syz.0.300 tries to shift op by -1; fix this program [ 255.406738][ T5187] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.297'. [ 255.433284][ T1392] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.441506][ T1392] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.603492][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.622159][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.665712][ T5203] loop0: detected capacity change from 0 to 1024 [ 255.676807][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.165846][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.192392][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.203175][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.213213][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.224751][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.235323][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.249399][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.290382][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.336977][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.613793][ T3613] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 257.687739][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.697811][ T3613] Bluetooth: hci6: Injecting HCI hardware error event [ 257.754277][ T3569] Bluetooth: hci6: hardware error 0x00 [ 257.781567][ T3613] Bluetooth: hci0: command 0x0406 tx timeout [ 257.791080][ T4907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.840204][ T4907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.898766][ T4907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.908460][ T4907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.056444][ T3990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.093481][ T3990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.205133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.320672][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.384329][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.487062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.759027][ T3619] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 259.299425][ T3619] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 259.317564][ T3619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.369264][ T3619] usb 1-1: config 0 has no interface number 0 [ 259.399015][ T3619] usb 1-1: config 0 interface 135 has no altsetting 0 [ 259.589794][ T3619] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 259.610704][ T3619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.621974][ T3619] usb 1-1: Product: syz [ 259.643368][ T3619] usb 1-1: Manufacturer: syz [ 259.708958][ T3619] usb 1-1: SerialNumber: syz [ 259.761640][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 259.761660][ T26] audit: type=1326 audit(1728612399.043:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 259.800187][ T3619] usb 1-1: config 0 descriptor?? [ 259.854289][ T3619] keyspan 1-1:0.135: Keyspan 2 port adapter converter detected [ 259.914214][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 87 [ 259.944666][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 7 [ 259.984901][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 81 [ 260.014652][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 1 [ 260.025231][ T26] audit: type=1326 audit(1728612399.053:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.049139][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 2 [ 260.073449][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 85 [ 260.098880][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 5 [ 260.139114][ T26] audit: type=1326 audit(1728612399.053:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.170992][ T3619] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 260.211819][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 83 [ 260.234639][ T26] audit: type=1326 audit(1728612399.053:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.263986][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 3 [ 260.278655][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 4 [ 260.303283][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 86 [ 260.324201][ T26] audit: type=1326 audit(1728612399.053:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.355107][ T3619] keyspan 1-1:0.135: found no endpoint descriptor for endpoint 6 [ 260.378762][ T3619] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 260.402124][ T26] audit: type=1326 audit(1728612399.053:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.456678][ T3619] usb 1-1: USB disconnect, device number 3 [ 260.503573][ T3619] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 260.539013][ T26] audit: type=1326 audit(1728612399.053:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.583537][ T3619] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 260.626787][ T3619] keyspan 1-1:0.135: device disconnected [ 260.711797][ T26] audit: type=1326 audit(1728612399.053:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 260.796600][ T5257] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 260.859189][ T5257] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.310'. [ 260.924563][ T26] audit: type=1326 audit(1728612399.053:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 261.116182][ T26] audit: type=1326 audit(1728612399.063:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1611f9ff9 code=0x7ffc0000 [ 261.183614][ T5264] loop3: detected capacity change from 0 to 2048 [ 261.385727][ T5264] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 262.117247][ T5285] loop1: detected capacity change from 0 to 16 [ 262.747264][ T5285] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 263.140142][ T5294] loop3: detected capacity change from 0 to 512 [ 263.218200][ T5294] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.270105][ T5294] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 263.610791][ T5308] loop1: detected capacity change from 0 to 256 [ 263.881541][ T5308] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 264.922827][ T5308] loop_set_status: loop1 () has still dirty pages (nrpages=4) [ 265.444014][ T5329] loop3: detected capacity change from 0 to 512 [ 265.679249][ T5329] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 265.728599][ T5329] EXT4-fs (loop3): 1 truncate cleaned up [ 266.319162][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 266.548168][ T5329] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.321: Directory hole found for htree leaf block 0 [ 266.613044][ T5340] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.321: Directory hole found for htree leaf block 0 [ 266.881092][ T5329] raw_sendmsg: syz.3.321 forgot to set AF_INET. Fix it! [ 268.051844][ T5355] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.281024][ T5355] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 268.352531][ T5356] loop3: detected capacity change from 0 to 16 [ 268.531477][ T5356] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 270.869977][ T5391] picdev_read: 88 callbacks suppressed [ 270.869998][ T5391] kvm: pic: non byte read [ 271.424174][ T5410] loop1: detected capacity change from 0 to 16 [ 272.591140][ T5410] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 272.614497][ T5418] loop0: detected capacity change from 0 to 128 [ 275.541528][ T5446] kvm: pic: non byte read [ 276.860213][ T5465] loop1: detected capacity change from 0 to 16 [ 278.163611][ T5465] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 278.618056][ T5478] loop1: detected capacity change from 0 to 2048 [ 278.853400][ T5478] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 279.796636][ T5500] loop0: detected capacity change from 0 to 2048 [ 280.983098][ T5500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.336953][ T5511] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 281.355290][ T5511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 281.368197][ T5511] EXT4-fs (loop0): This should not happen!! Data will be lost [ 281.368197][ T5511] [ 281.378014][ T5511] EXT4-fs (loop0): Total free blocks count 0 [ 281.384120][ T5511] EXT4-fs (loop0): Free/Dirty block details [ 281.390233][ T5511] EXT4-fs (loop0): free_blocks=66060288 [ 281.395952][ T5511] EXT4-fs (loop0): dirty_blocks=1968 [ 281.401359][ T5511] EXT4-fs (loop0): Block reservation details [ 281.407439][ T5511] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 283.048441][ T5512] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 283.060850][ T5512] EXT4-fs (loop0): This should not happen!! Data will be lost [ 283.060850][ T5512] [ 283.546576][ T3613] Bluetooth: hci1: command 0x0406 tx timeout [ 284.055902][ T5520] loop2: detected capacity change from 0 to 16 [ 284.742602][ T4316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.791489][ T5520] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 284.994564][ T4316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.134759][ T4316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.437692][ T4316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.034556][ T5543] loop3: detected capacity change from 0 to 2048 [ 286.249147][ T3011] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 288.448419][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 289.109054][ T3011] usb 2-1: device descriptor read/all, error -71 [ 289.500317][ T5576] loop1: detected capacity change from 0 to 16 [ 289.637853][ T5576] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 290.213568][ T5537] chnl_net:caif_netlink_parms(): no params data found [ 290.479178][ T3611] Bluetooth: hci0: command 0x041b tx timeout [ 290.734756][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.758164][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.806348][ T5537] device bridge_slave_0 entered promiscuous mode [ 291.061377][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.090219][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.142433][ T5537] device bridge_slave_1 entered promiscuous mode [ 291.293679][ T5616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 291.330221][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.394580][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.021001][ T5628] loop1: detected capacity change from 0 to 512 [ 292.273775][ T5635] loop2: detected capacity change from 0 to 16 [ 292.695988][ T5635] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 292.850598][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 292.925542][ T5537] team0: Port device team_slave_0 added [ 293.007085][ T5628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.059284][ T5628] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038 (0x7fffffff) [ 293.084925][ T5537] team0: Port device team_slave_1 added [ 293.226867][ T3574] Bluetooth: hci3: link tx timeout [ 293.232864][ T3574] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.411750][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.421480][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.774516][ T5646] __quota_error: 30 callbacks suppressed [ 293.774545][ T5646] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 293.791201][ T5646] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 293.842497][ T5646] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.399: Failed to acquire dquot type 0 [ 294.278941][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.375447][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.407666][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.949205][ T3652] Bluetooth: hci0: command 0x0419 tx timeout [ 295.348919][ T1075] Bluetooth: hci3: command 0x0406 tx timeout [ 295.388314][ T5656] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.395740][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.438452][ T4316] device hsr_slave_0 left promiscuous mode [ 295.449448][ T5656] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 295.483833][ T4316] device hsr_slave_1 left promiscuous mode [ 295.523689][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.576650][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.587062][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.619631][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.656115][ T4316] device bridge_slave_1 left promiscuous mode [ 295.670137][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.698629][ T4316] device bridge_slave_0 left promiscuous mode [ 295.710172][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.755478][ T4316] device veth1_macvtap left promiscuous mode [ 295.764283][ T4316] device veth0_macvtap left promiscuous mode [ 295.771198][ T4316] device veth1_vlan left promiscuous mode [ 295.777357][ T4316] device veth0_vlan left promiscuous mode [ 296.836248][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 296.922287][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 296.989613][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.023726][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.213711][ T5673] kvm: pic: non byte read [ 297.218224][ T5673] kvm: pic: level sensitive irq not supported [ 297.218291][ T5673] kvm: pic: non byte read [ 297.249274][ T5673] kvm: pic: non byte read [ 297.253947][ T5673] kvm: pic: non byte read [ 297.317438][ T4316] bond0 (unregistering): Released all slaves [ 298.006626][ T5658] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 298.027389][ T5658] netlink: 15382 bytes leftover after parsing attributes in process `syz.3.404'. [ 298.362154][ T5537] device hsr_slave_0 entered promiscuous mode [ 298.380749][ T5692] loop3: detected capacity change from 0 to 512 [ 298.402914][ T5537] device hsr_slave_1 entered promiscuous mode [ 298.430601][ T5537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.438643][ T5537] Cannot create hsr debugfs directory [ 298.561033][ T5692] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.573542][ T5692] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 298.754838][ T5703] loop1: detected capacity change from 0 to 1024 [ 298.836978][ T5705] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 298.847666][ T5705] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 298.857660][ T5705] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.413: Failed to acquire dquot type 0 [ 298.969978][ T5703] EXT4-fs (loop1): Ignoring removed bh option [ 299.110689][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nombcache,errors=remount-ro,init_itable=0x0000000000000007,debug_want_extra_isize=0x0000000000000080,bh,init_itable,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 299.223918][ T5703] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 299.268096][ T5703] EXT4-fs (loop1): Remounting filesystem read-only [ 299.306847][ T5703] EXT4-fs error (device loop1): ext4_lookup:1856: inode #13: comm syz.1.416: iget: bad extra_isize 132 (inode size 256) [ 299.591815][ T3687] EXT4-fs error (device loop1): ext4_lookup:1856: inode #13: comm syz-executor: iget: bad extra_isize 132 (inode size 256) [ 299.721752][ T3687] EXT4-fs error (device loop1): ext4_lookup:1856: inode #13: comm syz-executor: iget: bad extra_isize 132 (inode size 256) [ 299.806083][ T5537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.873108][ T5537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.052378][ T5537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.093362][ T5537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.515219][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.566472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.584665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.649925][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.685378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.714514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.768634][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.775733][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.853481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.897637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.490073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.542101][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.549233][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.557692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.586599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.621606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.737287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.797807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.825471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.856403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.943095][ T5748] loop2: detected capacity change from 0 to 16 [ 302.137423][ T5748] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 302.586530][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.608793][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.619200][ T5743] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 302.626858][ T5743] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.422'. [ 302.684375][ T5537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.746251][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.892256][ T5763] loop3: detected capacity change from 0 to 16 [ 302.938214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.948034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.473320][ T5763] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 303.598328][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 304.947252][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.959354][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.011014][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.146572][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.171558][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.226139][ T5733] chnl_net:caif_netlink_parms(): no params data found [ 305.297001][ T5537] device veth0_vlan entered promiscuous mode [ 305.430193][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.459710][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.491916][ T5793] loop2: detected capacity change from 0 to 512 [ 305.510174][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.539639][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.593889][ T5537] device veth1_vlan entered promiscuous mode [ 305.669274][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 305.693491][ T5793] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.715746][ T5793] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 306.139820][ T5808] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 306.151020][ T5808] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 306.161240][ T5808] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.431: Failed to acquire dquot type 0 [ 306.539869][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.569733][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.639584][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.692101][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.803984][ T5733] device bridge_slave_0 entered promiscuous mode [ 306.853593][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.912115][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.960337][ T5733] device bridge_slave_1 entered promiscuous mode [ 307.003818][ T5818] loop2: detected capacity change from 0 to 16 [ 307.712130][ T5818] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 307.749012][ T1075] Bluetooth: hci2: command 0x040f tx timeout [ 307.764458][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.798289][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.045486][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.095067][ T5537] device veth0_macvtap entered promiscuous mode [ 308.111861][ T5821] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 308.124052][ T5821] netlink: 15382 bytes leftover after parsing attributes in process `syz.2.433'. [ 308.169937][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.217442][ T5537] device veth1_macvtap entered promiscuous mode [ 308.368998][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.407305][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.448583][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.495394][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.536044][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.594638][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.654692][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.679031][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.720621][ T5841] loop2: detected capacity change from 0 to 2048 [ 308.727219][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.745508][ T5733] team0: Port device team_slave_0 added [ 308.769680][ T5733] team0: Port device team_slave_1 added [ 308.803656][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.810430][ T5841] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 308.821711][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.847105][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.872581][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.890196][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.910982][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.922885][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.934511][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.944789][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.955480][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.965818][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.976735][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.988199][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.065018][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.112369][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.150785][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.176515][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.402766][ T5845] device syzkaller0 entered promiscuous mode [ 309.429173][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.465024][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.487631][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.507353][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.546526][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.652380][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.669572][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.676526][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.698647][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.794764][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.829159][ T3611] Bluetooth: hci2: command 0x0419 tx timeout [ 309.856927][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.931962][ T3988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.946205][ T5865] loop3: detected capacity change from 0 to 2048 [ 310.279152][ T3988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.562659][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.583708][ T5733] device hsr_slave_0 entered promiscuous mode [ 310.601470][ T5733] device hsr_slave_1 entered promiscuous mode [ 310.615315][ T5733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.627154][ T5865] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.440: bad orphan inode 8192 [ 310.639250][ T5733] Cannot create hsr debugfs directory [ 310.645038][ T5874] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 310.652797][ T5865] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.663436][ T5874] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.442'. [ 310.753145][ T4316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.890816][ T5883] loop2: detected capacity change from 0 to 2048 [ 310.933482][ T4316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.993247][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 311.133579][ T4316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.372270][ T4316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.429077][ T3611] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 312.869230][ T3611] usb 5-1: Using ep0 maxpacket: 32 [ 313.051462][ T3611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 313.269204][ T3611] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 313.299037][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.338992][ T3611] usb 5-1: Product: syz [ 313.348170][ T3611] usb 5-1: Manufacturer: syz [ 313.359862][ T3611] usb 5-1: SerialNumber: syz [ 313.393690][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.416525][ T3611] usb 5-1: config 0 descriptor?? [ 313.439373][ T5898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 313.482382][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.514021][ T5924] kvm: pic: non byte read [ 313.518577][ T5924] kvm: pic: non byte read [ 313.529856][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.554143][ T5924] kvm: pic: non byte read [ 313.573203][ T5932] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 313.606650][ T5924] kvm: pic: non byte read [ 313.633479][ T5924] kvm: pic: non byte read [ 313.637972][ T5932] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.455'. [ 313.668151][ T5924] kvm: pic: non byte read [ 313.686490][ T5924] kvm: pic: non byte read [ 313.691411][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.717530][ T5924] kvm: pic: non byte read [ 313.739243][ T5924] kvm: pic: non byte read [ 313.752294][ T5924] kvm: pic: non byte read [ 313.821511][ T3652] usb 5-1: USB disconnect, device number 2 [ 313.827220][ T5924] kvm: pic: single mode not supported [ 313.827434][ T5924] kvm: pic: level sensitive irq not supported [ 313.861998][ T5938] loop3: detected capacity change from 0 to 2048 [ 313.904523][ T4316] device hsr_slave_0 left promiscuous mode [ 313.916537][ T4316] device hsr_slave_1 left promiscuous mode [ 313.954715][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.966311][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.984530][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.006265][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.043889][ T4316] device bridge_slave_1 left promiscuous mode [ 314.066670][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 314.081136][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.093072][ T4316] device bridge_slave_0 left promiscuous mode [ 314.123735][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.214556][ T4316] device veth1_macvtap left promiscuous mode [ 314.229944][ T4316] device veth0_macvtap left promiscuous mode [ 314.239356][ T4316] device veth1_vlan left promiscuous mode [ 314.245264][ T4316] device veth0_vlan left promiscuous mode [ 315.286744][ T5968] loop0: detected capacity change from 0 to 512 [ 315.353580][ T5968] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 315.371901][ T5968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 315.383895][ T5968] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 315.399793][ T5968] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 315.415998][ T5968] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,nogrpid,noauto_da_alloc,noblock_validity,usrquota,jqfmt=vfsold,lazytime,barrier=0x000000000000d95a,lazytime,,errors=continue. Quota mode: writeback. [ 315.985520][ T5976] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.462: dx entry: limit 65535 != root limit 120 [ 316.002650][ T5976] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.462: Corrupt directory, running e2fsck is recommended [ 316.414189][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 316.437283][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 316.462635][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.487750][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.899371][ T1392] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.905759][ T1392] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.014803][ T4316] bond0 (unregistering): Released all slaves [ 318.081466][ T5983] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 318.114485][ T5983] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.465'. [ 318.313832][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.336872][ T5989] loop3: detected capacity change from 0 to 512 [ 318.397151][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.407634][ T5989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 318.446580][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.456208][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.483890][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.497386][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.529428][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.536561][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.608299][ T5989] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.466: corrupted inode contents [ 318.639325][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.659126][ T5991] kvm: emulating exchange as write [ 318.689403][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.697530][ T5989] EXT4-fs error (device loop3): ext4_dirty_inode:6007: inode #16: comm syz.3.466: mark_inode_dirty error [ 318.724365][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.731510][ T3986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.749347][ T5989] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.466: corrupted inode contents [ 318.769352][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.797093][ T5989] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.466: mark_inode_dirty error [ 318.820364][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.829301][ T5989] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.466: corrupted inode contents [ 318.851355][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.887397][ T5989] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 318.890044][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.910632][ T5989] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.466: corrupted inode contents [ 318.920533][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.957529][ T5989] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.466: mark_inode_dirty error [ 318.980164][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.999177][ T5989] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 319.002164][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.028757][ T5989] EXT4-fs (loop3): 1 truncate cleaned up [ 319.053916][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.064350][ T5989] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.076775][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.098458][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.109061][ T5989] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038 (0x7fffffff) [ 319.120145][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.143167][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.173945][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.195142][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.203335][ T26] audit: type=1800 audit(1728612459.153:241): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.466" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 319.240862][ T5989] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #12: block 13: comm syz.3.466: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 319.336213][ T5989] EXT4-fs error (device loop3): ext4_get_group_desc:277: comm syz.3.466: block_group >= groups_count - block_group = 1048576, groups_count = 1 [ 319.394930][ T5989] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4438: inode #33554445: comm syz.3.466: unable to read itable block [ 319.519236][ T3690] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 319.564246][ T3690] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 319.661119][ T3690] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 319.691639][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.709943][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.729148][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.739575][ T3690] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2931: inode #15: comm syz-executor: corrupted xattr block 19 [ 319.825365][ T3690] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -74) [ 319.914768][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.085159][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.494046][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.513923][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.542249][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.579612][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.599713][ T5733] device veth0_vlan entered promiscuous mode [ 321.645835][ T5733] device veth1_vlan entered promiscuous mode [ 321.736534][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.759648][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.792463][ T5733] device veth0_macvtap entered promiscuous mode [ 321.816330][ T5733] device veth1_macvtap entered promiscuous mode [ 321.916805][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.947937][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.963784][ T6023] loop0: detected capacity change from 0 to 1024 [ 321.999839][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.098961][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.165240][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.211543][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.299017][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.461518][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.632128][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.973166][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.007375][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.066314][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.102652][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.148948][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.189106][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.222577][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.269692][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.310303][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.318006][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.349804][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.381638][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.419897][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.479722][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.547663][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.579937][ T5733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.589155][ T5995] EXT4-fs warning (device loop3): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 323.618918][ T5733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.674788][ T5733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.709482][ T5733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.747738][ T6033] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 323.765115][ T6033] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.477'. [ 323.998505][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.026733][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.080212][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.082481][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.109093][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.179241][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.622680][ T6048] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.662342][ T6048] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 324.697594][ T6049] dns_resolver: Unsupported content type (98) [ 326.435052][ T6059] loop0: detected capacity change from 0 to 1024 [ 327.705840][ T6063] loop0: detected capacity change from 0 to 2048 [ 327.850082][ T6063] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 328.302346][ T6074] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 328.316596][ T6074] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.489'. [ 328.480551][ T6076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 328.482803][ T6078] loop0: detected capacity change from 0 to 256 [ 328.535517][ T6078] exfat: Deprecated parameter 'namecase' [ 328.586372][ T6078] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 328.925100][ T6080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 329.041848][ T6082] loop1: detected capacity change from 0 to 256 [ 329.141477][ T6082] exfat: Deprecated parameter 'namecase' [ 329.316342][ T6082] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 330.431866][ T6100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.499'. [ 330.537011][ T6102] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 330.642551][ T6102] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.501'. [ 331.655592][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.498'. [ 331.896725][ T3990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.755887][ T26] audit: type=1326 audit(1728612472.713:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x0 [ 332.908067][ T26] audit: type=1326 audit(1728612472.803:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x0 [ 333.420580][ T3990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.516614][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 334.181346][ T3990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.229889][ T3990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.284479][ T6106] chnl_net:caif_netlink_parms(): no params data found [ 335.120543][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.127843][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.154256][ T6106] device bridge_slave_0 entered promiscuous mode [ 335.220381][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.240285][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.277929][ T6106] device bridge_slave_1 entered promiscuous mode [ 335.396864][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.439221][ T6164] loop1: detected capacity change from 0 to 2048 [ 335.489838][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.532466][ T26] audit: type=1326 audit(1728612475.493:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.589739][ T26] audit: type=1326 audit(1728612475.493:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.629552][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 335.630103][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 335.663524][ T26] audit: type=1326 audit(1728612475.513:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.664299][ T6106] team0: Port device team_slave_0 added [ 335.685630][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.685939][ T26] audit: type=1326 audit(1728612475.513:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.719663][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.747239][ T6106] team0: Port device team_slave_1 added [ 335.791147][ T26] audit: type=1326 audit(1728612475.513:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.854284][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.873510][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.912151][ T26] audit: type=1326 audit(1728612475.513:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.949566][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.965954][ T26] audit: type=1326 audit(1728612475.513:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 335.988110][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.002644][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.038056][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.119012][ T26] audit: type=1326 audit(1728612475.513:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb723ff9 code=0x7ffc0000 [ 336.157819][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.435606][ T6106] device hsr_slave_0 entered promiscuous mode [ 336.497615][ T6106] device hsr_slave_1 entered promiscuous mode [ 336.517412][ T6106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.550393][ T6106] Cannot create hsr debugfs directory [ 337.669052][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 338.127453][ T6210] loop1: detected capacity change from 0 to 8 [ 339.377561][ T6227] loop0: detected capacity change from 0 to 128 [ 339.627015][ T6227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 339.748991][ T1078] Bluetooth: hci4: command 0x0419 tx timeout [ 339.790497][ T6227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.902849][ T6232] loop1: detected capacity change from 0 to 2048 [ 340.197247][ T6232] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 340.214974][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 340.214987][ T26] audit: type=1326 audit(1728612480.173:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.363167][ T3988] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 340.384775][ T26] audit: type=1326 audit(1728612480.173:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384819][ T26] audit: type=1326 audit(1728612480.203:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384853][ T26] audit: type=1326 audit(1728612480.203:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384888][ T26] audit: type=1326 audit(1728612480.203:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384922][ T26] audit: type=1326 audit(1728612480.203:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384956][ T26] audit: type=1326 audit(1728612480.203:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.384995][ T26] audit: type=1326 audit(1728612480.203:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.385028][ T26] audit: type=1326 audit(1728612480.203:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.385062][ T26] audit: type=1326 audit(1728612480.203:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39674ff9 code=0x7ffc0000 [ 340.391520][ T3988] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 340.622020][ T6106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.754620][ T6106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.772272][ T6106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.915862][ T6106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.957551][ T3990] device hsr_slave_0 left promiscuous mode [ 342.005879][ T3990] device hsr_slave_1 left promiscuous mode [ 342.011952][ T3011] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 342.044414][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.111292][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.190173][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.254068][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.269124][ T3011] usb 2-1: Using ep0 maxpacket: 16 [ 342.346785][ T3990] device bridge_slave_1 left promiscuous mode [ 342.369217][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.389224][ T3011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.431553][ T3011] usb 2-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 342.499196][ T3011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.573679][ T3011] usb 2-1: config 0 descriptor?? [ 342.624505][ T3990] device bridge_slave_0 left promiscuous mode [ 342.640200][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.740042][ T3990] device veth1_macvtap left promiscuous mode [ 342.766505][ T3990] device veth0_macvtap left promiscuous mode [ 342.786804][ T3990] device veth1_vlan left promiscuous mode [ 342.846232][ T3990] device veth0_vlan left promiscuous mode [ 343.112509][ T3011] wacom 0003:056A:033C.0001: unknown main item tag 0x1 [ 343.119587][ T6297] loop2: detected capacity change from 0 to 1024 [ 343.144740][ T3011] wacom 0003:056A:033C.0001: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 343.185799][ T6297] loop2: detected capacity change from 0 to 256 [ 343.223905][ T3011] wacom 0003:056A:033C.0001: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.1-1/input0 [ 343.247348][ T6298] picdev_read: 90 callbacks suppressed [ 343.247362][ T6298] kvm: pic: non byte read [ 343.258386][ T6297] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.282076][ T3011] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033C.0001/input/input25 [ 343.289170][ T6298] kvm: pic: level sensitive irq not supported [ 343.294569][ T6298] kvm: pic: non byte read [ 343.336200][ T6298] kvm: pic: non byte read [ 343.340935][ T6298] kvm: pic: non byte read [ 343.439119][ T3011] usb 2-1: USB disconnect, device number 4 [ 343.924277][ T3990] team0 (unregistering): Port device team_slave_1 removed [ 344.046316][ T3990] team0 (unregistering): Port device team_slave_0 removed [ 344.108575][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.128299][ T6314] loop0: detected capacity change from 0 to 2048 [ 344.213012][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.324015][ T6314] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 449.408845][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 449.415482][ C0] rcu: 0-...!: (10499 ticks this GP) idle=3c1/0/0x1 softirq=25061/25061 fqs=0 [ 449.425706][ C0] (t=10500 jiffies g=31737 q=250) [ 449.430908][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g31737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 449.442110][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 449.452080][ C0] rcu: RCU grace-period kthread stack dump: [ 449.457980][ C0] task:rcu_preempt state:R running task stack:26168 pid: 15 ppid: 2 flags:0x00004000 [ 449.468797][ C0] Call Trace: [ 449.472076][ C0] [ 449.475010][ C0] __schedule+0x12c4/0x45b0 [ 449.479543][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 449.485485][ C0] ? release_firmware_map_entry+0x190/0x190 [ 449.491392][ C0] ? mod_timer_pending+0x20/0x20 [ 449.496366][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 449.501754][ C0] schedule+0x11b/0x1f0 [ 449.505920][ C0] schedule_timeout+0x1b9/0x300 [ 449.510781][ C0] ? console_conditional_schedule+0x40/0x40 [ 449.516689][ C0] ? update_process_times+0x200/0x200 [ 449.522174][ C0] ? prepare_to_swait_event+0x321/0x340 [ 449.527835][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 449.532701][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 449.537910][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 449.543129][ C0] ? rcu_gp_init+0xdae/0x1140 [ 449.547836][ C0] ? rcu_gp_init+0x1140/0x1140 [ 449.552611][ C0] ? finish_swait+0xc5/0x1d0 [ 449.557219][ C0] rcu_gp_kthread+0xa4/0x360 [ 449.561832][ C0] ? _raw_spin_unlock+0x40/0x40 [ 449.566703][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 449.571816][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 449.577725][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 449.582767][ C0] kthread+0x3f6/0x4f0 [ 449.586848][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 449.591963][ C0] ? kthread_blkcg+0xd0/0xd0 [ 449.596554][ C0] ret_from_fork+0x1f/0x30 [ 449.600989][ C0] [ 449.604011][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 449.610336][ C0] Sending NMI from CPU 0 to CPUs 1: [ 449.615548][ C1] NMI backtrace for cpu 1 [ 449.615559][ C1] CPU: 1 PID: 6312 Comm: syz.4.540 Not tainted 5.15.167-syzkaller #0 [ 449.615574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.615583][ C1] RIP: 0010:exit_to_user_mode_prepare+0x2/0x140 [ 449.615603][ C1] Code: c4 94 7e 0f 85 c1 fe ff ff e8 32 e1 92 ff e9 b7 fe ff ff 0f 0b eb b6 65 8b 05 8a a8 95 7e 85 c0 0f 84 10 fe ff ff eb 92 41 57 <41> 56 53 49 89 fe 83 3d 95 e8 7b 0c 00 74 1a 65 8b 05 48 cd 94 7e [ 449.615616][ C1] RSP: 0018:ffffc9000371fef8 EFLAGS: 00000046 [ 449.615629][ C1] RAX: ffffffff8186dfc8 RBX: ffffc9000371ff58 RCX: 0000000000040000 [ 449.615641][ C1] RDX: ffffc9000644a000 RSI: 000000000003ffff RDI: ffffc9000371ff58 [ 449.615652][ C1] RBP: ffffc9000371ff48 R08: ffffffff8186df90 R09: fffffbfff1bd2c16 [ 449.615663][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 449.615673][ C1] R13: 0000000000000000 R14: ffff888029b58000 R15: 0000000000000000 [ 449.615683][ C1] FS: 00007fcb37aed6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 449.615697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.615708][ C1] CR2: 000000110c2aca0d CR3: 000000005d6a1000 CR4: 00000000003526e0 [ 449.615721][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.615730][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.615739][ C1] Call Trace: [ 449.615745][ C1] [ 449.615750][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 449.615768][ C1] ? read_lock_is_recursive+0x10/0x10 [ 449.615784][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 449.615801][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 449.615824][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 449.615839][ C1] ? nmi_handle+0xf7/0x370 [ 449.615855][ C1] ? exit_to_user_mode_prepare+0x2/0x140 [ 449.615871][ C1] ? default_do_nmi+0x62/0x150 [ 449.615888][ C1] ? exc_nmi+0xa8/0x100 [ 449.615903][ C1] ? end_repeat_nmi+0x16/0x31 [ 449.615918][ C1] ? trace_hardirqs_off+0x50/0x70 [ 449.615935][ C1] ? trace_irq_disable_rcuidle+0x18/0x190 [ 449.615953][ C1] ? exit_to_user_mode_prepare+0x2/0x140 [ 449.615969][ C1] ? exit_to_user_mode_prepare+0x2/0x140 [ 449.615985][ C1] ? exit_to_user_mode_prepare+0x2/0x140 [ 449.616007][ C1] [ 449.616011][ C1] [ 449.616016][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 449.616035][ C1] do_syscall_64+0x47/0xb0 [ 449.616049][ C1] ? clear_bhb_loop+0x15/0x70 [ 449.616063][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.616081][ C1] RIP: 0033:0x7fcb3966bfa7 [ 449.616095][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d f2 78 cf 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 23 f5 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 66 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 449.616107][ C1] RSP: 002b:00007fcb37aeca48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 449.616122][ C1] RAX: 0000000000000145 RBX: 00007fcb37aecbb0 RCX: 00007fcb3966bfa7 [ 449.616132][ C1] RDX: 00007fcb37aeca80 RSI: 00007fcb37aecbb0 RDI: 0000000000000021 [ 449.616142][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.616151][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.616160][ C1] R13: 0000000000000000 R14: 00007fcb3982cf80 R15: 00007ffd9a571498 [ 449.616177][ C1] [ 449.616556][ C0] NMI backtrace for cpu 0 [ 449.940173][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.167-syzkaller #0 [ 449.948084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.958138][ C0] Call Trace: [ 449.961420][ C0] [ 449.964275][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 449.968963][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 449.974605][ C0] ? panic+0x860/0x860 [ 449.978685][ C0] ? read_lock_is_recursive+0x10/0x10 [ 449.984071][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 449.989024][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 449.995185][ C0] ? try_to_wake_up+0x844/0x1300 [ 450.000138][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 450.005601][ C0] ? _raw_spin_lock+0x40/0x40 [ 450.010284][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 450.016359][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 450.022347][ C0] rcu_dump_cpu_stacks+0x223/0x390 [ 450.027493][ C0] print_cpu_stall+0x320/0x600 [ 450.032268][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 450.037474][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 450.042322][ C0] ? hrtimer_run_queues+0x163/0x450 [ 450.047525][ C0] ? account_process_tick+0x232/0x3a0 [ 450.052905][ C0] update_process_times+0x196/0x200 [ 450.058109][ C0] tick_sched_timer+0x386/0x550 [ 450.062966][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 450.068519][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 450.073735][ C0] ? hrtimer_interrupt+0x980/0x980 [ 450.078853][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 450.084932][ C0] hrtimer_interrupt+0x392/0x980 [ 450.089977][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 450.095963][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 450.101598][ C0] [ 450.104526][ C0] [ 450.107454][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 450.113441][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 450.119249][ C0] Code: 82 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 fe 48 f7 0f 1f 44 00 00 e8 0a 7e 42 f7 0f 00 2d 73 5c a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 8b 48 8c f7 [ 450.138869][ C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3 [ 450.144939][ C0] RAX: ffffffff8a3ddc66 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0 [ 450.152910][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 450.160886][ C0] RBP: ffffffff8c607c10 R08: ffffffff8186db50 R09: fffffbfff18d7ab9 [ 450.168865][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70 [ 450.176834][ C0] R13: ffff8881417bb804 R14: ffffffff8c607ba0 R15: dffffc0000000000 [ 450.184810][ C0] ? trace_hardirqs_on+0x30/0x80 [ 450.189772][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 450.195013][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 450.200233][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 450.205801][ C0] ? rcu_qs+0x190/0x190 [ 450.209976][ C0] acpi_idle_enter+0x352/0x4f0 [ 450.214816][ C0] cpuidle_enter_state+0x521/0xef0 [ 450.219961][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 450.225361][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 450.230583][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 450.236318][ C0] cpuidle_enter+0x59/0x90 [ 450.240740][ C0] do_idle+0x3e4/0x670 [ 450.244829][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 450.250036][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 450.255675][ C0] ? schedule_idle+0x57/0x90 [ 450.260273][ C0] cpu_startup_entry+0x14/0x20 [ 450.265050][ C0] ? time_init+0x40/0x40 [ 450.269390][ C0] start_kernel+0x48c/0x540 [ 450.273911][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 450.279823][ C0]