last executing test programs: 5m5.09435895s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 4m5.729919674s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 3m37.223150952s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2m44.812187226s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2m8.935606599s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2m8.885837659s ago: executing program 4 (id=4031): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m7.024355146s ago: executing program 4 (id=4037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 2m6.729071643s ago: executing program 4 (id=4041): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000005c0)={0x0, 0xffffffffffffffe1, 0x2, 0x0, 0x1, [{}]}) 2m4.370422852s ago: executing program 4 (id=4047): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x24400, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\x16\x8f\xfdBQ\x963t\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x92', 0x42, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) mq_unlink(&(0x7f0000000340)='eth0\x00') 2m0.532631417s ago: executing program 4 (id=4059): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 1m5.461787508s ago: executing program 5 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = epoll_create(0x3) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 1m4.28834091s ago: executing program 0 (id=4151): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, "b0ac"}, 0x0, 0x0, 0x0, 0x0}) 14.640989437s ago: executing program 0 (id=4160): syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 12.789936134s ago: executing program 0 (id=4289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, r0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, &(0x7f0000000000)='/\x00\x9b\x1d\x00\x96', 0x0) tkill(r4, 0xb) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) 9.934461826s ago: executing program 1 (id=4293): open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) 9.084297658s ago: executing program 1 (id=4295): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 8.313902107s ago: executing program 3 (id=4296): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000300)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4b3966de5637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2fe, &(0x7f0000000b80)="$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") 8.239969581s ago: executing program 0 (id=4297): socket$l2tp6(0xa, 0x2, 0x73) socket(0x1, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x94000, 0x133) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) unshare(0x2a020400) semget$private(0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7) r4 = socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0xf) 8.010514489s ago: executing program 3 (id=4298): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.864799681s ago: executing program 3 (id=4299): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x11, 0x0, 0x5) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2) truncate(&(0x7f00000000c0)='./file2\x00', 0x0) getdents(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x8, 0x7fffffff, {{0x11, 0x4, 0x1, 0xc, 0x44, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr, @private, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x2, [{0x0, 0x9, "5a1c2231bf2519"}]}, @timestamp={0x44, 0x1c, 0x20, 0x0, 0x8, [0x101, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}}}}) sendmmsg$sock(r5, &(0x7f0000003240)=[{{&(0x7f0000000400)=@generic={0x2b, "0b3c24f4c40d6e917d8de032f12e7463b422e370610e5b30ee33b864cd344154aac879a2f1f901d6ea0cd548a0e2d12ad3eb620da2068b2784f6540e380b85a804cec368bd52c46f8ea9348d4e650067c4c701294d6c929249f0b7dde5494519f5953b9849f2fa9b888686c2438f7c61593ecd830c305063cb66f7173e94"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="88961a997aa234358f4e3d177377b1d691615e2b43eb8015da881881f1f5162011b476e5a9d40ab0d99f4abc83e70340a0adda028638d4d395572822bc3593bf4306ef6612", 0x45}], 0x1}}, {{&(0x7f0000000640)=@ll={0x11, 0x12, r6, 0x1, 0x80, 0x6, @multicast}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000780)="a7c89f31097521e40de5d7bd026b1e12fe7cfed2e457dcd74fae296211a504a1482113e87e77dc57a9d38d11a796ef984612766b170113802f6b8f91d4ae571419f0dd74fca5764b4978a9b271a94a1f9c2d45bcea9711310d0dc9004e608a89a7341a30294d4434d9c640f4d44faadb33dffde348f7d18a984e0f8a7876819b8ee75af49177c81b9dcb8996fd425d351724b0", 0x93}, {&(0x7f0000000700)="945d3183b2cf2758c75e17638108c1290862e5b6ea17b5de7b294e011880231521ef474f871d59e792d3a4519ce79f7d46", 0x31}, {0x0}, {&(0x7f0000000880)="4ed1c70012b2126dc73bf78697432d7fe3264ac293ca2f6b002cf7a1da7298228007246e57404ece8dcee875aaa2c90351e3c9488f86f262536c12e65e28d0e5b7f740ed9835e4d64984fb999e487e8d76d346cb9d727db0fb07353efb6c24687bd689dd0011f4b969899557fcef6a317dab83246e6248cf6fdb04ecef9a6cdcb7bff465e174b05480948b59af065c8bf36bb697239a881545923ebfafa9eb5805390e872f60a4aec594210df2d9cb058cde6d1ae1e0967c6c1ed67b33071be2388ec985df33a99aeb3f4e7bed27f94be5c6f1e31cb1044018c067", 0xdb}, {&(0x7f0000000980)="9c83d0", 0x3}, {0x0}, {0x0}, {&(0x7f0000002f80)="b917c5fd3f0f811c4b15ea24ffc2790fbf0d11388f4c14723b87c56b83103a71da25f4d8182fffee597847329326413166faa595d8440b2a521a2e3cd5babc58c1eb045fefca34060424f49de3ca01834435c6d1bfdc2cc3f7fc8c2abf219a6148899da69e8636e607613dd75d89e9df2796c15cd306467c79bbcc1ebf699fd5cf80857db6ceb9418b51015b5f0bc7c91cea5f4189bd93592e5efec5a036af88c2ea41eff0950ba4667c41ce54f231b20f4f9ccbe7f14244addfc310fa158bf7957147f9d63284fd3cfcaa2a9f051c3b0143585a3ebde6501f0ac029126d6b", 0xdf}, {&(0x7f0000003080)="c9921187aedfcd5d27ecbb6c593198ec982dacc8e833c3968e60ac182a13965304c182b61172c8479a5bfbe0541734b1ffa9a66616432ac223b33ad16a", 0x3d}], 0x9}}], 0x2, 0x4040000) sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) socket$inet6(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) socket(0x28, 0x800, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28}, {0x6}]}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="591a1d9a2bdb0180c2250000080045000078000000000029907800000000e00000010000000000649078200200000000000000000000bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da000000000000000bb10000085b2e000000000000000000bb3b5745eaacb857517501825f2195c4b058706558a70864bef1f0524a72fc460b8cd26e095f24"], 0x0) 7.648522487s ago: executing program 1 (id=4301): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1c14744, &(0x7f0000000500)={[{@bh}]}, 0xff, 0x49f, &(0x7f0000001400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000700)=""/206, 0xce}, {&(0x7f0000000480)=""/62, 0x3e}], 0x3, &(0x7f0000000800)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000940)=""/106, 0x6a}, {&(0x7f0000004180)=""/124, 0x7c}, {&(0x7f0000000a40)=""/102, 0x66}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x100}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/43, 0x2b}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/171, 0xab}], 0x1, &(0x7f0000001000)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001180), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000001200)=""/175, 0xaf}, {&(0x7f00000012c0)=""/81, 0x51}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/122, 0x7a}, {&(0x7f00000038c0)=""/199, 0xc7}], 0x5, &(0x7f0000003a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003ac0), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003b40)=""/195, 0xc3}, {&(0x7f0000003c40)=""/74, 0x4a}, {&(0x7f0000003cc0)=""/188, 0xbc}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000003d80)=""/61, 0x3d}, {&(0x7f0000003dc0)=""/251, 0xfb}, {&(0x7f0000003ec0)=""/90, 0x5a}], 0x7}}], 0x6, 0x40010083, &(0x7f0000004140)={0x77359400}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x0, @desc3}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {0x5}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$kcm(0x10, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000001265161424eba6c895f60d00560d5b0af9b8800a9c523d6572b1fbf1f375ea488e599e9230effd97f820d36911432d4226e7ce907b425320311a7fffc51f40000000008258ed28072d462eadc8572ad0f13a5e7800"/102, @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf250c0000000c00990005000000010000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x68, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x5014, @val, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6}, @void, @val={0x5, 0x3, {0x4, 0xae}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x4}}, @void, @void, @void, @void}}]}, 0x68}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={r11}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000004280)={0x0, 0x2, 0x5, 0x6, 0x0, 0x0, 0x4, 0x3, {r11, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0xc74}}, 0x5, 0x1b, 0x7a42, 0x6, 0xd8f}}, &(0x7f0000004340)=0xb0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x58, 0x1, "5db058d3ab6cb45bafefa9f925de88acb891fd5a6aa84bcb90d683e278af538d94c31525b8e84c97be0f51a74d35e0df093f256d1f7aa6ea05fbf66808ad50df1a6228d4e035f61e8e5cea301f84879062f4b3b8"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe60a}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6.414445788s ago: executing program 2 (id=4302): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "363dd045"}, 0x0, 0x4, {0x0}, 0x9}) 4.159468749s ago: executing program 0 (id=4303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240)) 4.157551816s ago: executing program 3 (id=4304): keyctl$read(0xb, 0x0, &(0x7f00000002c0)=""/103, 0x67) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='user.incfs.id\x00', &(0x7f00000001c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0xfc, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) r2 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SG_IO(r3, 0x2287, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000010, &(0x7f0000000000), 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) flistxattr(r0, 0x0, 0x0) 3.994331261s ago: executing program 2 (id=4305): r0 = socket$inet6(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/187, 0xbb}}], 0x1, 0x2000, 0x0) 3.855032781s ago: executing program 1 (id=4306): open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) 3.237787979s ago: executing program 2 (id=4307): r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000005ac0)=0x51) 3.085825763s ago: executing program 3 (id=4308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) 1.996256269s ago: executing program 3 (id=4309): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c0102030109022200010000000009040000000e010000082402010102002008"], 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 1.84534618s ago: executing program 1 (id=4310): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000000200)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1a12fe, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f00000002c0), 0xb) fallocate(r2, 0x20, 0x0, 0x10000) write$cgroup_int(r1, &(0x7f0000000140), 0x12) fallocate(r0, 0x8, 0x2000, 0x7000) 1.821725123s ago: executing program 2 (id=4311): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.461070781s ago: executing program 2 (id=4312): r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x401, 0x45833af96e4b39fe, 0x0) 1.324061256s ago: executing program 1 (id=4313): r0 = syz_io_uring_setup(0x2cdf, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x2a) 1.302145547s ago: executing program 4 (id=4061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x799583) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000b363d28f3e570000000f00000295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0xaba2493891f2befb}, 0x1c}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0) lseek(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, @raw_data=[0x0, 0x0, 0x0, 0x0, 0x1, 0x22, 0x8]}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) 1.142271759s ago: executing program 0 (id=4314): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000180)='./file0\x00', 0x1600008, &(0x7f00000001c0)=ANY=[], 0x3, 0x63a, &(0x7f0000000e40)="$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") lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'trusted.overlay.opaque\x00'}, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4315): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x6c5}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nobarrier}, {@noacl}, {@datacow}, {@nobarrier}, {@nodiscard}, {@ref_verify}, {@ref_verify}]}, 0x3, 0x55a3, &(0x7f0000005640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): tman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.244892][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.264540][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.292890][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.315110][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.336460][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.357913][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.371251][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.394541][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.418928][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.442616][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.463651][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.481363][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.506282][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.540821][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.564163][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.589223][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.636177][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.658091][ T5228] usb 2-1: USB disconnect, device number 32 [ 1535.679818][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.716890][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.749431][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.770789][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.785487][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.799612][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.815558][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.839296][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.859796][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.877235][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.892942][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.909631][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.951294][T19397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.165960][T19391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.174691][T19391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.224930][T19391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.262702][T19391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.349635][T19546] loop1: detected capacity change from 0 to 2048 [ 1536.377020][T19397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.446001][T19397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.459668][T19397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.488775][T19397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.661812][T19546] Alternate GPT is invalid, using primary GPT. [ 1536.669041][T19546] loop1: p1 p2 p3 [ 1537.277067][T19560] loop2: detected capacity change from 0 to 1024 [ 1537.295117][T19560] EXT4-fs: Ignoring removed oldalloc option [ 1537.298830][T19448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.326490][T19560] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1537.398121][T19560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.412375][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.420204][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.698251][ T9925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.712081][ T9931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.747273][ T9931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.754864][ T9925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.646052][ T9917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.653919][ T9917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.878543][T19393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.156265][T11322] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1539.238845][T19448] veth0_vlan: entered promiscuous mode [ 1539.299818][T19448] veth1_vlan: entered promiscuous mode [ 1539.384240][T11322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.409959][T11322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.444071][T19448] veth0_macvtap: entered promiscuous mode [ 1539.460192][T11322] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1539.487900][T19448] veth1_macvtap: entered promiscuous mode [ 1539.507337][T11322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.552002][T11322] usb 2-1: config 0 descriptor?? [ 1539.849256][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.957512][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.985176][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.048003][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.077477][T11322] creative-sb0540 0003:041E:3100.0031: No inputs registered, leaving [ 1540.093081][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.117087][T11322] creative-sb0540 0003:041E:3100.0031: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 1540.139317][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.174090][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.200872][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.221390][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.245169][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.269462][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.327899][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.359750][T11322] usb 2-1: USB disconnect, device number 33 [ 1540.372741][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.405616][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.423310][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.447016][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.473248][T19589] loop4: detected capacity change from 0 to 32768 [ 1540.480002][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1540.496200][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.511986][T19448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1540.574164][T19589] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1540.588933][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.609467][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.624762][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.638412][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.748117][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.786129][T19589] XFS (loop4): Ending clean mount [ 1540.794804][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.827231][T19589] XFS (loop4): Quotacheck needed: Please wait. [ 1540.831682][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.877008][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.916432][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.969701][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.987529][T19586] loop3: detected capacity change from 0 to 40427 [ 1540.997112][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.023601][T19586] F2FS-fs (loop3): heap/no_heap options were deprecated [ 1541.028327][T19589] XFS (loop4): Quotacheck: Done. [ 1541.060167][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.077741][T19586] F2FS-fs (loop3): invalid crc value [ 1541.113213][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.125514][T19586] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1541.160292][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.170127][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.181951][ T29] audit: type=1400 audit(1722456212.790:966): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3AB8 pid=19628 comm="syz.1.4014" [ 1541.263620][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.301271][T19448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.328834][T19448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.329973][ T29] audit: type=1804 audit(1722456212.947:967): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3981" name="/newroot/0/file0/file1" dev="loop4" ino=4422 res=1 errno=0 [ 1541.368696][T19448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.406776][T19636] loop1: detected capacity change from 0 to 512 [ 1541.441734][T19448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.464846][T19586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1541.478781][T19448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.503086][T19448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.545299][T19641] loop0: detected capacity change from 0 to 24 [ 1541.550956][T19448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.589824][T19636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.648448][T19636] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.886201][T19636] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.4016: Directory hole found for htree leaf block 0 [ 1541.909745][T19397] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1542.301666][T19398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.649699][T19654] loop2: detected capacity change from 0 to 512 [ 1542.656994][T19654] EXT4-fs: Ignoring removed bh option [ 1542.693174][T19391] syz-executor: attempt to access beyond end of device [ 1542.693174][T19391] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1542.759034][T19654] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.4023: invalid block [ 1542.790992][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.800609][T19660] loop1: detected capacity change from 0 to 128 [ 1542.802325][T19391] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1542.832677][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.876201][T19660] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1542.888565][T19654] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4023: couldn't read orphan inode 15 (err -117) [ 1542.945201][T19654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.950545][T19660] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.027488][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.078693][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.101723][T19654] loop2: detected capacity change from 512 to 11 [ 1543.111234][T19665] syz.2.4023: attempt to access beyond end of device [ 1543.111234][T19665] loop2: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 1543.202584][T19665] syz.2.4023: attempt to access beyond end of device [ 1543.202584][T19665] loop2: rw=12288, sector=14, nr_sectors = 2 limit=11 [ 1543.294198][T19398] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1543.316762][T19665] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.2.4023: unable to read itable block [ 1543.494059][T19393] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 1543.541558][T19670] Bluetooth: MGMT ver 1.23 [ 1544.564343][T19393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.772571][T18929] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 1546.101735][ T6171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.427792][ T6171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.647952][ T6171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.872070][ T5347] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1547.171562][T19712] loop4: detected capacity change from 0 to 512 [ 1547.231329][ T5347] usb 2-1: Using ep0 maxpacket: 16 [ 1547.261042][ T5347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.322502][T19712] EXT4-fs: Ignoring removed bh option [ 1547.395374][ T5347] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1547.416615][ T6171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.526638][T19712] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.4041: invalid block [ 1547.639253][ T5347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1547.733411][T19712] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4041: couldn't read orphan inode 15 (err -117) [ 1547.785047][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1547.895617][ T5347] usb 2-1: SerialNumber: syz [ 1547.929637][T19712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1548.157779][ T5347] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1548.200099][ T5347] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1548.222149][ T5347] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1549.018274][T19712] loop4: detected capacity change from 512 to 11 [ 1549.077081][T19727] loop3: detected capacity change from 0 to 512 [ 1549.104599][ T6171] bridge_slave_1: left allmulticast mode [ 1549.119281][ T6171] bridge_slave_1: left promiscuous mode [ 1549.151654][T19727] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 1549.169604][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.184001][T19397] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 1549.234896][T12246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1549.260864][T12246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1549.275814][T18928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1549.277110][T12246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1549.285081][T18928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1549.305080][T19397] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 1549.329596][T18928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1549.333245][ T6171] bridge_slave_0: left allmulticast mode [ 1549.342455][T18928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1549.346722][T12246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1549.363174][T12246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1549.376081][T18928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1549.384079][T18928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1549.391579][T18928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1549.664979][ T6171] bridge_slave_0: left promiscuous mode [ 1549.813350][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.822705][T19397] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 1550.500180][T19397] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.528811][ T5293] usb 2-1: USB disconnect, device number 34 [ 1551.244249][T18933] Bluetooth: Unexpected start frame (len 32) [ 1551.262051][T18933] Bluetooth: hci3: link tx timeout [ 1551.268400][T18933] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1551.585556][T19753] loop1: detected capacity change from 0 to 1764 [ 1551.629868][T18928] Bluetooth: hci2: command tx timeout [ 1551.637711][T18928] Bluetooth: hci0: command tx timeout [ 1552.426355][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.451514][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.485239][ T6171] bond0 (unregistering): Released all slaves [ 1552.757926][ T29] audit: type=1326 audit(1722456223.475:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19758 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1552.798721][ T29] audit: type=1326 audit(1722456223.475:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19758 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1552.825009][ T29] audit: type=1326 audit(1722456223.475:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19758 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1552.847265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1552.884905][ T29] audit: type=1326 audit(1722456223.475:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19758 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.140870][ T29] audit: type=1326 audit(1722456223.844:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.207467][ T29] audit: type=1326 audit(1722456223.844:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.229924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.252462][ T29] audit: type=1326 audit(1722456223.853:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.333217][ T29] audit: type=1326 audit(1722456223.853:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.355581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.368912][ T29] audit: type=1326 audit(1722456223.853:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7773b9 code=0x7ffc0000 [ 1553.391255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.428622][ T29] audit: type=1326 audit(1722456223.862:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e7c775e9f code=0x7ffc0000 [ 1553.537338][T18933] Bluetooth: hci3: command 0x0406 tx timeout [ 1553.613866][ T6171] hsr_slave_0: left promiscuous mode [ 1553.620171][ T6171] hsr_slave_1: left promiscuous mode [ 1553.685333][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.714230][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.814220][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.849619][T19781] loop3: detected capacity change from 0 to 1764 [ 1553.984094][T18933] Bluetooth: hci0: command tx timeout [ 1553.989611][T18933] Bluetooth: hci2: command tx timeout [ 1554.013934][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.534430][ T6171] veth1_macvtap: left promiscuous mode [ 1554.581924][ T6171] veth0_macvtap: left promiscuous mode [ 1554.653671][ T6171] veth1_vlan: left promiscuous mode [ 1554.691347][ T6171] veth0_vlan: left promiscuous mode [ 1554.944502][T19787] loop1: detected capacity change from 0 to 512 [ 1555.026786][T19787] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 1556.087538][T18933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1556.105736][T18933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1556.114513][T18933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1556.123847][T18933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1556.133597][T18933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1556.142359][T18933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1556.233107][T18933] Bluetooth: hci2: command tx timeout [ 1556.239126][T18929] Bluetooth: hci0: command tx timeout [ 1560.646416][T18933] Bluetooth: hci4: command tx timeout [ 1560.654241][T18933] Bluetooth: hci2: command tx timeout [ 1560.659787][T18929] Bluetooth: hci0: command tx timeout [ 1562.273144][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1562.910809][T18933] Bluetooth: hci4: command tx timeout [ 1563.708987][T19811] loop0: detected capacity change from 0 to 2048 [ 1563.832676][T19811] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1563.843876][T19811] NILFS (loop0): mounting unchecked fs [ 1563.911529][T19811] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1564.017547][T19811] NILFS (loop0): unable to fall back to spare super block [ 1564.024702][T19811] NILFS (loop0): error -22 while searching super root [ 1565.158261][T18933] Bluetooth: hci4: command tx timeout [ 1565.465982][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1565.466005][ T29] audit: type=1326 audit(1722456235.211:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.539169][ T29] audit: type=1326 audit(1722456235.211:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.606783][ T29] audit: type=1326 audit(1722456235.258:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.664897][ T29] audit: type=1326 audit(1722456235.258:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.731950][ T29] audit: type=1326 audit(1722456235.258:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.818817][ T29] audit: type=1326 audit(1722456235.258:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a40975e9f code=0x7ffc0000 [ 1565.914861][T19824] loop0: detected capacity change from 0 to 2048 [ 1565.919500][ T29] audit: type=1326 audit(1722456235.258:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1565.957298][ T58] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1565.977828][ T29] audit: type=1326 audit(1722456235.258:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1566.057228][ T29] audit: type=1326 audit(1722456235.258:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1566.102967][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 1566.129691][ T29] audit: type=1326 audit(1722456235.258:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.0.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a409773b9 code=0x7ffc0000 [ 1566.169830][T19824] Alternate GPT is invalid, using primary GPT. [ 1566.206683][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.221150][T19824] loop0: p1 p2 p3 [ 1566.227910][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.267807][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1566.314643][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1566.371402][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.395277][T18929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1566.407513][T18929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1566.418940][T18929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1566.431465][ T58] usb 4-1: config 0 descriptor?? [ 1566.462668][T18929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1566.470852][T18929] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1566.479624][T18929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1566.896513][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 1566.922679][ T58] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1566.933408][ T58] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 1566.986934][ T58] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1567.191292][T19830] loop0: detected capacity change from 0 to 128 [ 1567.205076][ T5295] usb 4-1: USB disconnect, device number 36 [ 1567.409984][T18929] Bluetooth: hci4: command tx timeout [ 1567.705500][T19832] loop0: detected capacity change from 0 to 32768 [ 1567.714004][T19832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4079 (19832) [ 1567.736879][T19832] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1567.747111][T19832] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1567.755838][T19832] BTRFS info (device loop0): using free-space-tree [ 1568.377889][ T5291] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1568.612652][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 1568.621084][ T5291] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1568.630601][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.689700][ T5291] usb 4-1: config 0 descriptor?? [ 1568.713575][T18929] Bluetooth: hci5: command tx timeout [ 1568.735001][ T5291] usb 4-1: Found UVC 0.00 device (2833:0201) [ 1569.101356][ T5291] usb 4-1: No valid video chain found. [ 1569.156424][ T5291] usb 4-1: USB disconnect, device number 37 [ 1569.943561][T19728] chnl_net:caif_netlink_parms(): no params data found [ 1571.016613][T18929] Bluetooth: hci5: command tx timeout [ 1571.645562][T19395] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1571.826263][T19728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.833610][T19728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.854578][T19728] bridge_slave_0: entered allmulticast mode [ 1571.867688][T19728] bridge_slave_0: entered promiscuous mode [ 1571.927727][T19728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.947258][T19728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.997233][T19728] bridge_slave_1: entered allmulticast mode [ 1572.007345][T19728] bridge_slave_1: entered promiscuous mode [ 1572.125021][T19730] chnl_net:caif_netlink_parms(): no params data found [ 1572.151112][T19877] loop3: detected capacity change from 0 to 2048 [ 1572.172289][T19877] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1572.213285][T19877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1572.384949][T19728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.445070][T19827] chnl_net:caif_netlink_parms(): no params data found [ 1572.473485][T19728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.503654][ T9920] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 1572.505334][T19890] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1572.566872][T19881] loop0: detected capacity change from 0 to 128 [ 1572.574409][T19881] vfat: Unknown parameter '' [ 1572.730920][ T5295] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1572.736704][T19728] team0: Port device team_slave_0 added [ 1572.947725][T19728] team0: Port device team_slave_1 added [ 1572.947848][ T5295] usb 4-1: Using ep0 maxpacket: 32 [ 1572.978728][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.001354][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.023330][ T5295] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1573.024092][T19730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.032381][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.046556][ T5295] usb 4-1: config 0 descriptor?? [ 1573.070715][T19730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.088524][T19730] bridge_slave_0: entered allmulticast mode [ 1573.104687][T19730] bridge_slave_0: entered promiscuous mode [ 1573.127784][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.142534][T19730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.165765][T19730] bridge_slave_1: entered allmulticast mode [ 1573.173470][T19730] bridge_slave_1: entered promiscuous mode [ 1573.218697][T18929] Bluetooth: hci5: command tx timeout [ 1573.280872][T19893] loop0: detected capacity change from 0 to 32768 [ 1573.338245][T19893] [ 1573.338245][T19893] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.338245][T19893] [ 1573.383766][T19893] read_mapping_page failed! [ 1573.391736][T19893] ERROR: (device loop0): txCommit: [ 1573.391736][T19893] [ 1573.405398][ T6171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.511817][ T9920] [ 1573.511817][ T9920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.511817][ T9920] [ 1573.518074][ T5295] wacom 0003:056A:00DE.0033: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 1573.522325][ T9920] [ 1573.522325][ T9920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.522325][ T9920] [ 1573.522838][ T112] [ 1573.522838][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.522838][ T112] [ 1573.547346][ T5295] wacom 0003:056A:00DE.0033: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.3-1/input0 [ 1573.561163][T19395] [ 1573.561163][T19395] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.561163][T19395] [ 1573.577841][T19395] [ 1573.577841][T19395] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1573.577841][T19395] [ 1573.601028][ T5295] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DE.0033/input/input53 [ 1573.711258][ T6171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.723978][ T5295] usb 4-1: USB disconnect, device number 38 [ 1573.767241][T19728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.809358][T19728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.856241][T19728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.901988][T19730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.963407][ T6171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.010547][T19728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.017528][T19728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.073100][T19728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.122352][T19730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.179774][T19795] chnl_net:caif_netlink_parms(): no params data found [ 1574.306258][ T6171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.489291][T19730] team0: Port device team_slave_0 added [ 1574.496288][T19827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.516481][T19827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.530317][T19827] bridge_slave_0: entered allmulticast mode [ 1574.538060][T19827] bridge_slave_0: entered promiscuous mode [ 1574.566709][T19827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.583991][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.591696][T19827] bridge_slave_1: entered allmulticast mode [ 1574.607378][T19827] bridge_slave_1: entered promiscuous mode [ 1574.694329][T19730] team0: Port device team_slave_1 added [ 1574.873207][T19728] hsr_slave_0: entered promiscuous mode [ 1574.899359][T19728] hsr_slave_1: entered promiscuous mode [ 1574.906579][T19728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1574.923293][T19728] Cannot create hsr debugfs directory [ 1575.078939][T19730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.093257][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.129289][T19730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.145411][T19827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.204742][T19915] ªªªªªª: renamed from vlan0 (while UP) [ 1575.237071][T19730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.244053][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.310256][T19730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.370490][T19827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.472966][T18929] Bluetooth: hci5: command tx timeout [ 1575.524214][T19795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.532644][T19795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.561292][T19795] bridge_slave_0: entered allmulticast mode [ 1575.580160][T19795] bridge_slave_0: entered promiscuous mode [ 1575.852488][T19827] team0: Port device team_slave_0 added [ 1575.859486][T19795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.878348][T19795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.897885][T19795] bridge_slave_1: entered allmulticast mode [ 1575.917089][T19795] bridge_slave_1: entered promiscuous mode [ 1576.092126][T19827] team0: Port device team_slave_1 added [ 1576.193380][T19730] hsr_slave_0: entered promiscuous mode [ 1576.210945][T19730] hsr_slave_1: entered promiscuous mode [ 1576.243578][T19730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1576.252039][T19730] Cannot create hsr debugfs directory [ 1576.413890][ T6171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.592567][T19795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.639564][T19795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.728414][ T6171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.764041][T19827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.783948][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.823530][T19926] loop3: detected capacity change from 0 to 32768 [ 1576.841292][T19827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.849076][T19926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4099 (19926) [ 1576.908860][T19926] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1576.936396][T19926] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1576.944896][T19926] BTRFS info (device loop3): using free-space-tree [ 1577.123906][ T6171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.175891][T19827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.182893][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.260872][T19827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.313282][T19795] team0: Port device team_slave_0 added [ 1577.368806][T19391] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1577.493978][ T6171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.695045][T19795] team0: Port device team_slave_1 added [ 1577.842273][T19827] hsr_slave_0: entered promiscuous mode [ 1577.890848][T19827] hsr_slave_1: entered promiscuous mode [ 1577.914128][T19827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1577.921731][T19827] Cannot create hsr debugfs directory [ 1578.079993][T19795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.096074][T19795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.142149][T19795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.321693][T19728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.424493][T19795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.442147][T19795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.491162][T19795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.624352][T19728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.868605][T19728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.194086][T19728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.274389][T19953] loop0: detected capacity change from 0 to 128 [ 1579.293035][T19953] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1579.311467][T19795] hsr_slave_0: entered promiscuous mode [ 1579.330354][T19953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1579.340614][T19795] hsr_slave_1: entered promiscuous mode [ 1579.352276][T19795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.371381][T19795] Cannot create hsr debugfs directory [ 1579.625359][ T6171] bridge_slave_1: left allmulticast mode [ 1579.631069][ T6171] bridge_slave_1: left promiscuous mode [ 1579.677940][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.702440][ T6171] bridge_slave_0: left allmulticast mode [ 1579.725132][ T6171] bridge_slave_0: left promiscuous mode [ 1579.753309][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.782766][ T6171] bridge_slave_1: left allmulticast mode [ 1579.790222][ T6171] bridge_slave_1: left promiscuous mode [ 1579.795976][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.828558][ T6171] bridge_slave_0: left allmulticast mode [ 1579.836763][ T6171] bridge_slave_0: left promiscuous mode [ 1579.843868][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.868348][ T6171] bridge_slave_1: left allmulticast mode [ 1579.875535][T19969] loop0: detected capacity change from 0 to 256 [ 1579.881915][ T6171] bridge_slave_1: left promiscuous mode [ 1579.882127][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.900097][ T6171] bridge_slave_0: left allmulticast mode [ 1579.907013][T19969] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1579.912848][ T6171] bridge_slave_0: left promiscuous mode [ 1579.935866][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.310884][T19971] loop0: detected capacity change from 0 to 1024 [ 1580.326344][T19971] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent [ 1580.378774][T19971] loop0: detected capacity change from 0 to 512 [ 1580.588931][T19971] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1580.613554][ C1] sd 0:0:1:0: [sda] tag#2564 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1580.623978][ C1] sd 0:0:1:0: [sda] tag#2564 CDB: Write(6) 0a 0b 00 08 00 00 [ 1581.813341][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.836048][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.849315][ T6171] bond0 (unregistering): Released all slaves [ 1582.058473][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.072579][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.085439][ T6171] bond0 (unregistering): Released all slaves [ 1582.273886][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.288069][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.307081][ T6171] bond0 (unregistering): Released all slaves [ 1583.039556][T19978] loop3: detected capacity change from 0 to 32768 [ 1583.051760][T19978] [ 1583.051760][T19978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.051760][T19978] [ 1583.119277][T19978] read_mapping_page failed! [ 1583.123830][T19978] ERROR: (device loop3): txCommit: [ 1583.123830][T19978] [ 1583.236536][ T9920] [ 1583.236536][ T9920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.236536][ T9920] [ 1583.247282][ T9920] [ 1583.247282][ T9920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.247282][ T9920] [ 1583.260009][T19391] [ 1583.260009][T19391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.260009][T19391] [ 1583.291002][ T113] [ 1583.291002][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.291002][ T113] [ 1583.308461][T19391] [ 1583.308461][T19391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1583.308461][T19391] [ 1583.488752][T19730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1583.515932][T19730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1583.559023][T19730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1583.667818][T19730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1583.790548][ T6171] hsr_slave_0: left promiscuous mode [ 1583.820580][ T6171] hsr_slave_1: left promiscuous mode [ 1583.834501][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.850435][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.862341][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.869757][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.901770][ T6171] hsr_slave_0: left promiscuous mode [ 1583.916036][ T6171] hsr_slave_1: left promiscuous mode [ 1583.924298][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.931800][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.941222][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.958505][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.002325][ T6171] hsr_slave_0: left promiscuous mode [ 1584.025315][ T6171] hsr_slave_1: left promiscuous mode [ 1584.045686][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.053136][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.083250][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.099563][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.281370][ T6171] veth1_macvtap: left promiscuous mode [ 1584.303442][ T6171] veth0_macvtap: left promiscuous mode [ 1584.309491][ T6171] veth1_vlan: left promiscuous mode [ 1584.314841][ T6171] veth0_vlan: left promiscuous mode [ 1584.349154][ T6171] veth1_macvtap: left promiscuous mode [ 1584.354746][ T6171] veth0_macvtap: left promiscuous mode [ 1584.370549][ T6171] veth1_vlan: left promiscuous mode [ 1584.375948][ T6171] veth0_vlan: left promiscuous mode [ 1584.401480][ T6171] veth1_macvtap: left promiscuous mode [ 1584.416636][ T6171] veth0_macvtap: left promiscuous mode [ 1584.422329][ T6171] veth1_vlan: left promiscuous mode [ 1584.445133][ T6171] veth0_vlan: left promiscuous mode [ 1585.601806][T19996] loop0: detected capacity change from 0 to 2048 [ 1585.640869][T19996] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1585.848750][T20000] netlink: 'syz.0.4122': attribute type 3 has an invalid length. [ 1585.875554][T20000] netlink: 'syz.0.4122': attribute type 4 has an invalid length. [ 1585.897535][T20000] netlink: 'syz.0.4122': attribute type 7 has an invalid length. [ 1585.917390][T20000] netlink: 'syz.0.4122': attribute type 8 has an invalid length. [ 1585.926710][T20000] netlink: 'syz.0.4122': attribute type 7 has an invalid length. [ 1585.946198][T20002] loop3: detected capacity change from 0 to 512 [ 1585.947441][T20000] netlink: 198180 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1585.967698][T20002] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1586.063185][T20002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 1586.071319][T20002] System zones: 1-12 [ 1586.137544][T20002] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4121: corrupted in-inode xattr: e_value size too large [ 1586.193535][T20002] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4121: couldn't read orphan inode 15 (err -117) [ 1586.248654][T20002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.624832][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 1587.738815][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 1589.296273][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 1589.378035][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 1590.757516][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 1590.850638][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 1591.451876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.063590][T19728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1592.213240][T19728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1592.311170][T19391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.423174][T19728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1592.441051][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1592.448788][T19728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1592.536291][T19730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.866301][T19730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.285402][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.292675][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.513368][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.520622][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.997208][T20032] loop3: detected capacity change from 0 to 16 [ 1594.066758][T20032] erofs: Unknown parameter 'user_pattr' [ 1596.504538][T19730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.303669][T19728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.417091][T19728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.786921][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.794192][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.820647][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.827885][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.897178][T19730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.018309][T19795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1600.122692][T19795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1600.196646][T19795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1600.316394][T19795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1600.405313][T20068] loop0: detected capacity change from 0 to 128 [ 1600.452908][T19827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1600.455099][T20068] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1600.473301][T20068] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.567154][T19827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1600.675565][T19827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1600.813441][T19827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1601.056134][T19728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.162583][T19730] veth0_vlan: entered promiscuous mode [ 1601.939161][T19730] veth1_vlan: entered promiscuous mode [ 1602.013571][T19795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.218960][T19795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.243458][T19728] veth0_vlan: entered promiscuous mode [ 1602.590124][T19730] veth0_macvtap: entered promiscuous mode [ 1602.651228][T19730] veth1_macvtap: entered promiscuous mode [ 1603.817242][T19728] veth1_vlan: entered promiscuous mode [ 1603.842348][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.849628][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.273932][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.281151][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.350546][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.486659][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.496777][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.518256][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.528091][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.538769][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.548636][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.559112][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.569152][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.579615][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.591599][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.626204][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.642754][T19730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1604.663057][T19395] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1604.694086][T19827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.733791][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.751009][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.761423][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.771916][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.909903][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.009132][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.094721][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.229545][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.366754][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.481068][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.564727][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.623189][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.646983][T19730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.686346][T20092] loop0: detected capacity change from 0 to 4096 [ 1605.735219][T19730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.769298][T19730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.780334][T19730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.789273][T19730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.812974][T19827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.843539][T19728] veth0_macvtap: entered promiscuous mode [ 1605.860391][T20094] netlink: 'syz.3.4143': attribute type 13 has an invalid length. [ 1605.983406][T19728] veth1_macvtap: entered promiscuous mode [ 1606.009981][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.017198][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.038489][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.045657][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.330121][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.338012][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.395547][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.420670][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.441865][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.468974][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.478888][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.508071][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.527774][T20106] loop0: detected capacity change from 0 to 512 [ 1606.535469][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.548615][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.558798][T20106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1606.569182][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.580536][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.592261][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.604375][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.616207][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.631909][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.642021][T20106] EXT4-fs (loop0): 1 truncate cleaned up [ 1606.649207][T20106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.665450][T19728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.732895][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.790978][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.826366][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.836861][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.875206][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.891234][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.912069][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.929470][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.946522][T19395] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1606.967054][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.977559][T19395] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1606.988707][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.015279][T19395] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1607.032074][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.048633][T19395] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1607.075245][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.085363][T19728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.091637][T19395] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1607.114297][T19728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.133586][T19395] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1607.165523][T19395] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1607.168279][T19728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.211103][T19395] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1607.250327][T19395] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1607.280872][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.289985][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.319377][T19728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.329247][T19395] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1607.359776][T19728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.386061][T19728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.406828][T19728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.472266][T20113] loop3: detected capacity change from 0 to 512 [ 1607.521882][T20113] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1607.579006][T20113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 1607.662388][T20113] System zones: 1-12 [ 1607.666080][T19795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.672541][T20113] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4150: corrupted in-inode xattr: e_value size too large [ 1607.693787][T20113] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4150: couldn't read orphan inode 15 (err -117) [ 1607.739610][T20113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1607.993056][ T9925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.013922][ T9925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.296347][ T9920] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.695746][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.723123][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.791304][T19518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.792992][ T9920] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.989103][ T9920] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.071927][T19827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.182243][ T9920] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.404975][T19795] veth0_vlan: entered promiscuous mode [ 1609.508688][T19795] veth1_vlan: entered promiscuous mode [ 1609.546031][T19827] veth0_vlan: entered promiscuous mode [ 1609.819142][T19827] veth1_vlan: entered promiscuous mode [ 1609.871841][ T9920] bridge_slave_1: left allmulticast mode [ 1609.877526][ T9920] bridge_slave_1: left promiscuous mode [ 1609.883805][T20134] loop2: detected capacity change from 0 to 256 [ 1609.907508][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.940102][ T9920] bridge_slave_0: left allmulticast mode [ 1609.945814][ T9920] bridge_slave_0: left promiscuous mode [ 1609.991841][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.202095][T18933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1610.221775][T18933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1610.242305][T18933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1610.253474][T18933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1610.267914][T18933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1610.277604][T18933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1610.313924][T18929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1610.333139][T18929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1610.370489][T12246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1610.404493][T12246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1610.431255][T12246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1610.440407][T12246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1612.153426][T20148] loop2: detected capacity change from 0 to 16 [ 1612.163511][T20148] erofs: Unknown parameter 'user_pattr' [ 1612.312992][ T9920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.351652][T19391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.364945][ T9920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.391817][ T9920] bond0 (unregistering): Released all slaves [ 1612.494455][T18933] Bluetooth: hci2: command tx timeout [ 1612.809645][T18933] Bluetooth: hci3: command tx timeout [ 1613.547365][T19795] veth0_macvtap: entered promiscuous mode [ 1613.687350][T19795] veth1_macvtap: entered promiscuous mode [ 1613.974704][ T9920] hsr_slave_0: left promiscuous mode [ 1614.045361][ T9920] hsr_slave_1: left promiscuous mode [ 1614.077008][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.100022][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.155373][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.162807][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.214010][ T9920] veth1_macvtap: left promiscuous mode [ 1614.227335][ T9920] veth0_macvtap: left promiscuous mode [ 1614.238028][ T9920] veth1_vlan: left promiscuous mode [ 1614.243487][ T9920] veth0_vlan: left promiscuous mode [ 1614.753170][T18933] Bluetooth: hci2: command tx timeout [ 1615.042532][T18933] Bluetooth: hci3: command tx timeout [ 1615.705504][T20169] loop2: detected capacity change from 0 to 4096 [ 1615.713899][T20169] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1615.751232][T20169] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1616.584721][ T9920] team0 (unregistering): Port device team_slave_1 removed [ 1616.748095][ T9920] team0 (unregistering): Port device team_slave_0 removed [ 1617.013885][T18933] Bluetooth: hci2: command tx timeout [ 1617.157802][T20184] loop2: detected capacity change from 0 to 32768 [ 1617.171000][T20184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4168 (20184) [ 1617.195342][T20184] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1617.205687][T20184] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1617.214453][T20184] BTRFS info (device loop2): using free-space-tree [ 1617.263889][T18933] Bluetooth: hci3: command tx timeout [ 1617.343752][ T5347] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1617.841581][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.108687][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.336604][ T5347] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1618.345750][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.412241][ T5347] usb 4-1: config 0 descriptor?? [ 1618.629735][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.674383][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.693535][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.714649][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.726987][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.752942][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.774570][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.801834][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.824822][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.845204][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.855030][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.876270][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.887292][T19795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.910291][T19795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.974473][T19728] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1618.987801][ T5347] logitech 0003:046D:C20E.0034: rdesc size test failed for formula gp [ 1618.998019][T19795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.012086][T19827] veth0_macvtap: entered promiscuous mode [ 1619.012773][ T5347] logitech 0003:046D:C20E.0034: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0 [ 1619.076959][T19827] veth1_macvtap: entered promiscuous mode [ 1619.210012][ T5347] usb 4-1: USB disconnect, device number 39 [ 1619.259873][T18933] Bluetooth: hci2: command tx timeout [ 1619.445513][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.468472][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.484925][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.511629][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.522473][T18933] Bluetooth: hci3: command tx timeout [ 1619.560537][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.593192][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.603032][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.610772][T12246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1619.626367][T12246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1619.635643][T12246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1619.644640][T12246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1619.649092][T20212] loop2: detected capacity change from 0 to 4096 [ 1619.653358][T12246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1619.665559][T12246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1619.679718][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.692004][T20212] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1619.710992][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.746224][T20212] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1619.753412][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.798944][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.809475][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.819343][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.829860][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.864875][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.875416][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.926790][T19827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.199725][T20221] loop3: detected capacity change from 0 to 256 [ 1620.222292][T20221] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1620.269053][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.298797][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.319298][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.329775][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.379791][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.411893][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.428261][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.449095][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.459474][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.475675][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.496423][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.538271][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.549005][T19827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.559714][T19827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.586205][T19827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1620.616982][T19827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.626038][T19827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.654402][T19827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.672427][T19827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.760898][T20135] chnl_net:caif_netlink_parms(): no params data found [ 1620.864922][T20139] chnl_net:caif_netlink_parms(): no params data found [ 1621.431127][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1621.440575][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.457359][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.477833][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1621.484311][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1621.490871][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1621.497322][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1621.503892][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.511753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.519725][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.527586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.535573][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.543407][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.551363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.559228][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.567188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.575021][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.582966][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.590826][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.598775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.606596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.614545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.622398][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.630333][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.638210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.646163][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.654029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.661973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.669831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.677784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.685652][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.693597][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.701543][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.709488][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.717352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.725274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.733135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.741088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.748912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.756864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.764720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.772670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.780484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.788418][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.796275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.804242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.812057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.819994][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.827849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.835743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.843591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.851510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.859351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.867239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.875088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.883047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.890919][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.898857][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.906713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.914631][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.922443][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.930381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.938235][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.946192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.954026][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.956167][T20244] loop2: detected capacity change from 0 to 256 [ 1621.961957][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.975939][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.983900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1621.991762][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1621.999709][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.007529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.015487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.023364][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.031322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.039183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.047161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.055028][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.062957][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.070818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.078772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.086628][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.094509][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.102356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.110272][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.118091][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.126042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.133902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.141852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.149673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.157586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.165435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.173382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1622.181194][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1622.193956][T12246] Bluetooth: hci6: command tx timeout [ 1622.368298][T20135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.375485][T20135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.396711][T20135] bridge_slave_0: entered allmulticast mode [ 1622.410235][T20135] bridge_slave_0: entered promiscuous mode [ 1622.412265][T20247] loop3: detected capacity change from 0 to 2048 [ 1622.423140][T20139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.430421][T20139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.438136][T20139] bridge_slave_0: entered allmulticast mode [ 1622.445399][T20247] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1622.456959][T20139] bridge_slave_0: entered promiscuous mode [ 1622.493575][T20135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.506668][T20248] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1622.513389][T20135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.532654][T20135] bridge_slave_1: entered allmulticast mode [ 1622.540072][T20135] bridge_slave_1: entered promiscuous mode [ 1622.548989][T20139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.561276][T20139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.571883][T20139] bridge_slave_1: entered allmulticast mode [ 1622.579595][T20139] bridge_slave_1: entered promiscuous mode [ 1622.750940][T20250] loop3: detected capacity change from 0 to 512 [ 1622.771131][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.778985][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.789131][T20250] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4181: bad orphan inode 15 [ 1622.802295][T20250] ext4_test_bit(bit=14, block=5) = 0 [ 1622.809044][T20250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.133168][T19391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.293615][T20139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.750394][T20135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.818618][T20139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.910249][T20135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.967280][T20260] loop3: detected capacity change from 0 to 4096 [ 1623.985680][T20260] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1624.023159][T20260] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1624.065694][T20265] loop1: detected capacity change from 0 to 764 [ 1624.081474][T18933] Bluetooth: hci0: unexpected event 0x30 length: 8 > 3 [ 1624.167868][T20213] chnl_net:caif_netlink_parms(): no params data found [ 1624.358300][T20139] team0: Port device team_slave_0 added [ 1624.378474][T18933] Bluetooth: hci6: command tx timeout [ 1624.392785][T20139] team0: Port device team_slave_1 added [ 1624.456079][T20135] team0: Port device team_slave_0 added [ 1624.542001][T20135] team0: Port device team_slave_1 added [ 1624.655615][ C0] eth0: bad gso: type: 1, size: 1408 [ 1624.759078][T20276] loop3: detected capacity change from 0 to 512 [ 1624.774044][T20276] EXT4-fs: Mount option(s) incompatible with ext3 [ 1625.070724][T18933] Bluetooth: hci1: command 0x0406 tx timeout [ 1625.913263][T20278] loop1: detected capacity change from 0 to 4096 [ 1625.955139][T20278] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1626.055781][T20278] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1626.082058][T20139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.104185][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.188001][T20139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.238901][T20135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.245888][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.298160][T20135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.314357][T20135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.322709][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.349526][T20135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.383775][T20139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.408329][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.444858][T20139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.627150][T12246] Bluetooth: hci6: command tx timeout [ 1626.741926][T20213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.760357][T20213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.781584][T20213] bridge_slave_0: entered allmulticast mode [ 1626.790430][T20213] bridge_slave_0: entered promiscuous mode [ 1626.799515][T20213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.809849][T20213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.817193][T20213] bridge_slave_1: entered allmulticast mode [ 1626.842567][T20213] bridge_slave_1: entered promiscuous mode [ 1626.873355][T20139] hsr_slave_0: entered promiscuous mode [ 1626.907408][T20139] hsr_slave_1: entered promiscuous mode [ 1626.938975][T20139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1626.954347][T20139] Cannot create hsr debugfs directory [ 1627.199383][T20296] sock: sock_set_timeout: `syz.1.4193' (pid 20296) tries to set negative timeout [ 1627.237133][T20297] input: syz1 as /devices/virtual/input/input59 [ 1627.337391][T20135] hsr_slave_0: entered promiscuous mode [ 1627.368787][T20135] hsr_slave_1: entered promiscuous mode [ 1627.397056][T20135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1627.404636][T20135] Cannot create hsr debugfs directory [ 1627.448664][T20213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.573831][T20306] loop2: detected capacity change from 0 to 2048 [ 1627.592409][T20306] udf: Unknown parameter 'nov' [ 1627.643944][T20213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.682872][T12246] Bluetooth: hci5: unexpected event 0x30 length: 8 > 3 [ 1628.897456][T12246] Bluetooth: hci6: command tx timeout [ 1628.916390][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1630.494419][ T9920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.778487][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1630.835069][ T9920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.964138][ T9920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.015475][T20213] team0: Port device team_slave_0 added [ 1631.016054][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1631.050877][T20213] team0: Port device team_slave_1 added [ 1631.062053][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.075722][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.112261][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1631.138027][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.165954][ T9] usb 4-1: config 0 descriptor?? [ 1631.273917][ T9920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.345070][T20332] netlink: 'syz.1.4207': attribute type 4 has an invalid length. [ 1631.363018][T20332] netlink: 'syz.1.4207': attribute type 7 has an invalid length. [ 1631.390596][T20332] netlink: 198180 bytes leftover after parsing attributes in process `syz.1.4207'. [ 1631.403448][T20213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.419223][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.458547][T20213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.519422][T20213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.524067][T20334] usb usb8: usbfs: process 20334 (syz.1.4208) did not claim interface 0 before use [ 1631.541910][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.590520][T20213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.665673][ T9] kye 0003:0458:5019.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1631.688318][ T9] kye 0003:0458:5019.0035: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 1631.699480][ T9] kye 0003:0458:5019.0035: tablet-enabling feature report not found [ 1631.725919][ T9] kye 0003:0458:5019.0035: tablet enabling failed [ 1631.773372][T20213] hsr_slave_0: entered promiscuous mode [ 1631.780620][T20213] hsr_slave_1: entered promiscuous mode [ 1631.787290][T20213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1631.794973][T20213] Cannot create hsr debugfs directory [ 1631.839835][ T5347] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1631.906490][ T9920] bridge_slave_1: left allmulticast mode [ 1631.920104][ T9920] bridge_slave_1: left promiscuous mode [ 1631.924780][T17787] usb 4-1: USB disconnect, device number 40 [ 1631.931015][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.949715][ T9920] bridge_slave_0: left allmulticast mode [ 1631.955792][ T9920] bridge_slave_0: left promiscuous mode [ 1631.961682][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.983202][ T9920] bridge_slave_1: left allmulticast mode [ 1631.988845][ T9920] bridge_slave_1: left promiscuous mode [ 1631.994647][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.015414][ T9920] bridge_slave_0: left allmulticast mode [ 1632.021086][ T9920] bridge_slave_0: left promiscuous mode [ 1632.028256][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.057836][ T5347] usb 2-1: not running at top speed; connect to a high speed hub [ 1632.079929][ T5347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 1632.109691][ T5347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1632.133713][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.141720][ T5347] usb 2-1: Product: и [ 1632.171201][T20334] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1632.658157][ T5347] cdc_ncm 2-1:1.0: bind() failure [ 1632.684935][ T5347] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1632.722343][ T5347] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1632.758192][ T5347] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1632.806076][ T5347] usb 2-1: USB disconnect, device number 35 [ 1633.046677][T20346] loop3: detected capacity change from 0 to 2048 [ 1633.065780][T20346] udf: Unknown parameter 'nov' [ 1635.671317][T12246] Bluetooth: hci0: link tx timeout [ 1635.685393][T12246] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1636.100430][ T9920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.347230][ T9920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.383864][ T9920] bond0 (unregistering): Released all slaves [ 1636.716309][T20376] loop1: detected capacity change from 0 to 512 [ 1636.723738][ T9920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.724392][T20376] EXT4-fs: Ignoring removed orlov option [ 1636.747446][ T9920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.756690][T20376] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4223: casefold flag without casefold feature [ 1636.775032][ T9920] bond0 (unregistering): Released all slaves [ 1636.781914][T20376] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4223: couldn't read orphan inode 15 (err -117) [ 1636.802143][T20376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.913465][T19827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.898970][T18933] Bluetooth: hci0: command 0x0406 tx timeout [ 1638.468267][ T9920] hsr_slave_0: left promiscuous mode [ 1638.499559][ T9920] hsr_slave_1: left promiscuous mode [ 1638.515987][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.529756][T20404] loop1: detected capacity change from 0 to 512 [ 1638.537308][T20404] EXT4-fs: Ignoring removed orlov option [ 1638.543432][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.669404][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.693468][T20404] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4234: casefold flag without casefold feature [ 1638.747495][T20404] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4234: couldn't read orphan inode 15 (err -117) [ 1638.772367][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1638.786984][ T9920] hsr_slave_0: left promiscuous mode [ 1638.796437][T20404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1638.826651][ T9920] hsr_slave_1: left promiscuous mode [ 1638.835987][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1638.846481][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.866948][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.911737][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.002324][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.518560][T19827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.632328][ T9920] veth1_macvtap: left promiscuous mode [ 1639.641799][ T9920] veth0_macvtap: left promiscuous mode [ 1639.671455][ T9920] veth1_vlan: left promiscuous mode [ 1639.699480][ T9920] veth0_vlan: left promiscuous mode [ 1639.727683][ T9920] veth1_macvtap: left promiscuous mode [ 1639.740803][ T9920] veth0_macvtap: left promiscuous mode [ 1639.746596][ T9920] veth1_vlan: left promiscuous mode [ 1639.929641][ T9920] veth0_vlan: left promiscuous mode [ 1641.099343][T20430] loop1: detected capacity change from 0 to 1024 [ 1642.690710][T20441] loop3: detected capacity change from 0 to 512 [ 1642.700014][T20441] EXT4-fs: Ignoring removed orlov option [ 1642.725882][T20441] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4248: casefold flag without casefold feature [ 1642.740725][T20441] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4248: couldn't read orphan inode 15 (err -117) [ 1642.755236][T20441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.798469][ T9920] team0 (unregistering): Port device team_slave_1 removed [ 1642.812751][T19391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.925358][ T9920] team0 (unregistering): Port device team_slave_0 removed [ 1644.175246][ T9920] team0 (unregistering): Port device team_slave_1 removed [ 1644.235266][ T9920] team0 (unregistering): Port device team_slave_0 removed [ 1645.019848][ T9925] hfsplus: b-tree write err: -5, ino 4 [ 1645.239103][T20139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1645.321548][T20139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1646.226903][T20139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1646.255429][T20139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1648.059661][T20487] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1648.078908][T20139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.319908][T20139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.411294][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.418682][ T5293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.535124][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.542373][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.857012][T20139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1649.173780][T20135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1649.213824][T20135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1649.280421][T20135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1649.346364][T20135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1649.543214][T20213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1649.598357][T20213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1649.706267][T20213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1649.762916][T20213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1651.301755][T20139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.754170][T20135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.862971][T20213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.886223][T20139] veth0_vlan: entered promiscuous mode [ 1651.915188][T20135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.987028][T19650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.994210][T19650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.111131][T20139] veth1_vlan: entered promiscuous mode [ 1652.999051][T20135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1653.023292][T20523] loop1: detected capacity change from 0 to 16 [ 1653.047482][T20135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1653.083918][T20523] erofs: Unknown parameter 'user_pattr' [ 1653.108531][T19650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.115746][T19650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.420492][T20213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.110128][T19650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.117370][T19650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.205933][T19650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.213179][T19650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.341835][T20533] loop3: detected capacity change from 0 to 512 [ 1654.396570][T20533] EXT4-fs (loop3): filesystem is read-only [ 1654.418187][T20533] EXT4-fs (loop3): filesystem is read-only [ 1654.424025][T20533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1654.433975][T20139] veth0_macvtap: entered promiscuous mode [ 1654.500474][T20533] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4278: bad orphan inode 16 [ 1655.001651][T20533] ext4_test_bit(bit=15, block=3) = 0 [ 1655.211813][T20139] veth1_macvtap: entered promiscuous mode [ 1655.258261][T20533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1655.403040][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.444354][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.466210][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.477457][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.487289][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.498102][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.508854][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.523448][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.533608][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.550429][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.561340][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.610438][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.636989][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.659031][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.692397][T20139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.501086][T20549] loop2: detected capacity change from 0 to 32768 [ 1656.571008][T20549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4280 (20549) [ 1656.615349][T20549] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1656.626091][T20549] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1656.634798][T20549] BTRFS info (device loop2): using free-space-tree [ 1656.642505][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.653153][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.666232][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.690820][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.701369][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.727394][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.744873][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.768449][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.778426][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.791566][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.802390][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.821308][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.831545][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.842202][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.855729][T20139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.858017][T19391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.164138][T20139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.173854][T20139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.182598][T20139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.191428][T20139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.806079][T20574] loop1: detected capacity change from 0 to 512 [ 1657.882969][T20574] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1657.919593][T20574] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1657.951165][T20135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.958179][T20574] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1657.998112][T20574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1658.057131][T20574] System zones: 0-2, 18-18, 34-34 [ 1658.108865][T20574] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1658.210471][T20574] EXT4-fs (loop1): 1 truncate cleaned up [ 1658.217665][T20574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1658.270569][T19728] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1658.302731][T20572] EXT4-fs warning (device loop1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 1658.410515][ T9917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.461034][ T9917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.507130][T19827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.577435][ T9917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.585264][ T9917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.710746][T20213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.315544][T20601] loop1: detected capacity change from 0 to 64 [ 1660.313299][T20600] Trying to free block not in datazone [ 1660.319507][T20600] Trying to free block not in datazone [ 1660.325142][T20600] Trying to free block not in datazone [ 1660.330603][T20600] Trying to free block not in datazone [ 1660.336160][T20600] Trying to free block not in datazone [ 1660.343146][T20600] minix_free_block (loop1:6): bit already cleared [ 1660.350463][T20600] Trying to free block not in datazone [ 1660.925235][T20135] veth0_vlan: entered promiscuous mode [ 1660.999156][T20135] veth1_vlan: entered promiscuous mode [ 1663.495958][T20135] veth0_macvtap: entered promiscuous mode [ 1663.566567][ T5293] libceph: connect (1)[c::]:6789 error -101 [ 1663.584477][ T5293] libceph: mon0 (1)[c::]:6789 connect error [ 1663.604269][T20135] veth1_macvtap: entered promiscuous mode [ 1663.696275][T20616] ceph: No mds server is up or the cluster is laggy [ 1663.747229][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.801818][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.036900][ T5228] libceph: connect (1)[c::]:6789 error -101 [ 1664.049590][ T5228] libceph: mon0 (1)[c::]:6789 connect error [ 1664.153336][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.217654][T20639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1664.415670][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.492091][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.543794][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.594566][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.650109][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.696453][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.883995][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.920450][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.959894][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.980692][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.011593][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.030030][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.064126][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.086203][T20135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.183907][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.213388][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.239678][ T5293] libceph: connect (1)[c::]:6789 error -101 [ 1665.265359][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.266900][ T5293] libceph: mon0 (1)[c::]:6789 connect error [ 1665.328352][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.357489][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.360278][T20645] loop3: detected capacity change from 0 to 64 [ 1665.408131][T20645] hfs: get root inode failed [ 1665.480585][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.512316][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.544143][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.585512][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.609066][T20648] usb usb1: usbfs: process 20648 (syz.3.4298) did not claim interface 0 before use [ 1665.620542][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.653465][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.663976][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.675797][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.686317][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.696152][T20135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.733034][T20135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.843958][T20135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1665.944610][T20135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.993465][T20135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.039784][T20135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.081618][T20135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.134539][T20655] loop1: detected capacity change from 0 to 512 [ 1667.071772][T20655] EXT4-fs: Ignoring removed bh option [ 1668.239253][T20655] EXT4-fs error (device loop1): __ext4_iget:4985: inode #12: block 2: comm syz.1.4301: invalid block [ 1669.263847][T20213] veth0_vlan: entered promiscuous mode [ 1669.411281][T20213] veth1_vlan: entered promiscuous mode [ 1669.447672][T20655] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4301: couldn't read orphan inode 12 (err -117) [ 1669.535562][T20655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.680367][T20670] loop2: detected capacity change from 0 to 512 [ 1669.730886][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.746875][T20213] veth0_macvtap: entered promiscuous mode [ 1669.766139][T19827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.778645][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.808683][T20670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1669.842762][T20213] veth1_macvtap: entered promiscuous mode [ 1669.867802][T20670] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.982645][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.004743][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.056726][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.115454][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.149756][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.192610][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.230082][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.261710][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.292603][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.334167][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.355358][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.378875][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.388811][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.433243][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.476946][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.519886][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.529718][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.587081][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.611001][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.638813][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.692046][T20213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1670.754284][T19728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1670.780264][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.808705][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.831412][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.844192][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.854555][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.877680][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.904389][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.919379][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.942357][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.963619][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.973573][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.984574][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.007653][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.028982][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.054689][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.075823][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.092371][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.115701][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.139550][T20213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.212051][T20213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.239005][T20213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.254897][T20213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.274915][T20213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.398697][T12246] Bluetooth: hci3: command tx timeout [ 1671.744595][ T9925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.752445][ T9925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.871801][T20686] loop1: detected capacity change from 0 to 512 [ 1671.918844][T20687] usb usb1: usbfs: process 20687 (syz.2.4311) did not claim interface 0 before use [ 1671.934119][ T9925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.962028][T20686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1671.974870][ T9925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.028704][T20686] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1672.092684][ T5291] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1672.255665][T19827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.340431][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 1672.590326][ T5291] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 1672.602642][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.610663][ T5291] usb 4-1: Product: syz [ 1672.622009][ T5291] usb 4-1: Manufacturer: syz [ 1672.632465][ T5291] usb 4-1: SerialNumber: syz [ 1672.670729][T20697] loop0: detected capacity change from 0 to 1024 [ 1672.935088][ T5291] usb 4-1: config 0 descriptor?? [ 1673.598846][ T5291] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 1673.605324][ T5291] usb 4-1: No valid video chain found. [ 1673.613263][ T5291] usb 4-1: USB disconnect, device number 41 [ 1673.619327][T12246] Bluetooth: hci3: command 0x0406 tx timeout [ 1673.648499][T20700] ================================================================== [ 1673.656567][T20700] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 1673.664075][T20700] Read of size 8 at addr ffff88802d741230 by task syz.1.4313/20700 [ 1673.672037][T20700] [ 1673.674368][T20700] CPU: 0 UID: 0 PID: 20700 Comm: syz.1.4313 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 1673.685116][T20700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1673.695169][T20700] Call Trace: [ 1673.698975][T20700] [ 1673.701930][T20700] dump_stack_lvl+0x241/0x360 [ 1673.706614][T20700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.711855][T20700] ? __pfx__printk+0x10/0x10 [ 1673.716469][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.722124][T20700] ? _printk+0xd5/0x120 [ 1673.726299][T20700] ? __virt_addr_valid+0x183/0x530 [ 1673.731470][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.737122][T20700] print_report+0x169/0x550 [ 1673.741656][T20700] ? __virt_addr_valid+0x183/0x530 [ 1673.746779][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.752427][T20700] ? __virt_addr_valid+0x45f/0x530 [ 1673.757553][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.763202][T20700] ? __phys_addr+0xba/0x170 [ 1673.767721][T20700] ? uprobe_mmap+0xb9a/0x11a0 [ 1673.772418][T20700] kasan_report+0x143/0x180 [ 1673.776958][T20700] ? uprobe_mmap+0xb9a/0x11a0 [ 1673.781659][T20700] uprobe_mmap+0xb9a/0x11a0 [ 1673.786165][T20700] ? shmem_is_huge+0x28e/0x2f0 [ 1673.790938][T20700] ? __pfx_uprobe_mmap+0x10/0x10 [ 1673.795881][T20700] mmap_region+0x1891/0x2090 [ 1673.800472][T20700] ? mark_lock+0x9a/0x350 [ 1673.804832][T20700] ? __pfx_mmap_region+0x10/0x10 [ 1673.809793][T20700] ? mm_get_unmapped_area+0xa5/0xd0 [ 1673.814995][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.820623][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.826251][T20700] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 1673.831892][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.837776][T20700] ? cap_mmap_addr+0x163/0x2c0 [ 1673.842537][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.848162][T20700] ? __get_unmapped_area+0x2f0/0x360 [ 1673.853452][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.859181][T20700] do_mmap+0x8f9/0x1010 [ 1673.863358][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.868990][T20700] ? __pfx_do_mmap+0x10/0x10 [ 1673.873599][T20700] ? __pfx_down_write_killable+0x10/0x10 [ 1673.879242][T20700] ? __pfx_ima_file_mmap+0x10/0x10 [ 1673.884392][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.890025][T20700] ? security_mmap_file+0x178/0x1a0 [ 1673.895232][T20700] vm_mmap_pgoff+0x1dd/0x3d0 [ 1673.899915][T20700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1673.905027][T20700] ? __fget_files+0x29/0x470 [ 1673.909619][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.915249][T20700] ? __fget_files+0x3f6/0x470 [ 1673.920025][T20700] ksys_mmap_pgoff+0x4f1/0x720 [ 1673.924797][T20700] ? __x64_sys_mmap+0x7f/0x140 [ 1673.929655][T20700] do_syscall_64+0xf3/0x230 [ 1673.934162][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.940055][T20700] RIP: 0033:0x7f6304f773b9 [ 1673.944494][T20700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1673.964093][T20700] RSP: 002b:00007f6305c8d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1673.972501][T20700] RAX: ffffffffffffffda RBX: 00007f6305105f80 RCX: 00007f6304f773b9 [ 1673.980465][T20700] RDX: 0000000002000005 RSI: 0000000000400000 RDI: 0000000020000000 [ 1673.988448][T20700] RBP: 00007f6304fe48e6 R08: 0000000000000004 R09: 0000000000000000 [ 1673.996445][T20700] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1674.004408][T20700] R13: 000000000000000b R14: 00007f6305105f80 R15: 00007ffe73fc32f8 [ 1674.012381][T20700] [ 1674.015389][T20700] [ 1674.017697][T20700] Allocated by task 19391: [ 1674.022108][T20700] kasan_save_track+0x3f/0x80 [ 1674.026812][T20700] __kasan_kmalloc+0x98/0xb0 [ 1674.031400][T20700] __kmalloc_cache_node_noprof+0x1d3/0x300 [ 1674.037199][T20700] __get_vm_area_node+0x113/0x270 [ 1674.042230][T20700] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 1674.048118][T20700] vzalloc_noprof+0x79/0x90 [ 1674.052611][T20700] alloc_counters+0xd7/0x740 [ 1674.057211][T20700] do_ip6t_get_ctl+0xecc/0x1820 [ 1674.062056][T20700] nf_getsockopt+0x29b/0x2c0 [ 1674.066640][T20700] ipv6_getsockopt+0x263/0x380 [ 1674.071404][T20700] tcp_getsockopt+0x165/0x1c0 [ 1674.076074][T20700] do_sock_getsockopt+0x375/0x850 [ 1674.081105][T20700] __sys_getsockopt+0x271/0x330 [ 1674.085959][T20700] __x64_sys_getsockopt+0xb5/0xd0 [ 1674.090984][T20700] do_syscall_64+0xf3/0x230 [ 1674.095485][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.101387][T20700] [ 1674.103707][T20700] Freed by task 19391: [ 1674.107757][T20700] kasan_save_track+0x3f/0x80 [ 1674.112429][T20700] kasan_save_free_info+0x40/0x50 [ 1674.117447][T20700] poison_slab_object+0xe0/0x150 [ 1674.122383][T20700] __kasan_slab_free+0x37/0x60 [ 1674.127144][T20700] kfree+0x149/0x360 [ 1674.131030][T20700] do_ip6t_get_ctl+0x11eb/0x1820 [ 1674.135960][T20700] nf_getsockopt+0x29b/0x2c0 [ 1674.140543][T20700] ipv6_getsockopt+0x263/0x380 [ 1674.145301][T20700] tcp_getsockopt+0x165/0x1c0 [ 1674.149966][T20700] do_sock_getsockopt+0x375/0x850 [ 1674.154990][T20700] __sys_getsockopt+0x271/0x330 [ 1674.159841][T20700] __x64_sys_getsockopt+0xb5/0xd0 [ 1674.164867][T20700] do_syscall_64+0xf3/0x230 [ 1674.169389][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.175283][T20700] [ 1674.177589][T20700] The buggy address belongs to the object at ffff88802d741200 [ 1674.177589][T20700] which belongs to the cache kmalloc-64 of size 64 [ 1674.191455][T20700] The buggy address is located 48 bytes inside of [ 1674.191455][T20700] freed 64-byte region [ffff88802d741200, ffff88802d741240) [ 1674.205067][T20700] [ 1674.207374][T20700] The buggy address belongs to the physical page: [ 1674.213768][T20700] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802d741a00 pfn:0x2d741 [ 1674.223839][T20700] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1674.231890][T20700] page_type: 0xfdffffff(slab) [ 1674.236557][T20700] raw: 00fff00000000200 ffff8880158418c0 ffffea0001eca1d0 ffffea0000a67750 [ 1674.245130][T20700] raw: ffff88802d741a00 0000000000200018 00000001fdffffff 0000000000000000 [ 1674.253697][T20700] page dumped because: kasan: bad access detected [ 1674.260096][T20700] page_owner tracks the page as allocated [ 1674.265790][T20700] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5348, tgid 5348 (syz.5.6), ts 88502271495, free_ts 88500980425 [ 1674.284532][T20700] post_alloc_hook+0x1f3/0x230 [ 1674.289293][T20700] get_page_from_freelist+0x2e4c/0x2f10 [ 1674.294840][T20700] __alloc_pages_noprof+0x256/0x6c0 [ 1674.300039][T20700] alloc_slab_page+0x5f/0x120 [ 1674.304714][T20700] allocate_slab+0x5a/0x2f0 [ 1674.309212][T20700] ___slab_alloc+0xcd1/0x14b0 [ 1674.313884][T20700] __slab_alloc+0x58/0xa0 [ 1674.318206][T20700] __kmalloc_noprof+0x25a/0x400 [ 1674.323061][T20700] security_task_alloc+0x43/0x130 [ 1674.328093][T20700] copy_process+0x169e/0x3dc0 [ 1674.332766][T20700] kernel_clone+0x226/0x8f0 [ 1674.337269][T20700] __se_sys_clone3+0x2cb/0x350 [ 1674.342031][T20700] do_syscall_64+0xf3/0x230 [ 1674.346542][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.352453][T20700] page last free pid 5223 tgid 5223 stack trace: [ 1674.358763][T20700] free_unref_page+0xd22/0xea0 [ 1674.363553][T20700] vfree+0x186/0x2e0 [ 1674.367541][T20700] __do_replace+0x874/0xa50 [ 1674.372049][T20700] do_ip6t_set_ctl+0xf11/0x1270 [ 1674.376888][T20700] nf_setsockopt+0x297/0x2c0 [ 1674.381471][T20700] do_sock_setsockopt+0x3b1/0x720 [ 1674.386494][T20700] __sys_setsockopt+0x1ae/0x250 [ 1674.391343][T20700] __x64_sys_setsockopt+0xb5/0xd0 [ 1674.396365][T20700] do_syscall_64+0xf3/0x230 [ 1674.400890][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.406780][T20700] [ 1674.409089][T20700] Memory state around the buggy address: [ 1674.414702][T20700] ffff88802d741100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1674.422749][T20700] ffff88802d741180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1674.430793][T20700] >ffff88802d741200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1674.438840][T20700] ^ [ 1674.444457][T20700] ffff88802d741280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1674.452505][T20700] ffff88802d741300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1674.460552][T20700] ================================================================== [ 1674.517353][T20700] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1674.524566][T20700] CPU: 0 UID: 0 PID: 20700 Comm: syz.1.4313 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 1674.535339][T20700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1674.545403][T20700] Call Trace: [ 1674.548690][T20700] [ 1674.551627][T20700] dump_stack_lvl+0x241/0x360 [ 1674.556331][T20700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.561552][T20700] ? __pfx__printk+0x10/0x10 [ 1674.566161][T20700] ? preempt_schedule+0xe1/0xf0 [ 1674.571032][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.576681][T20700] ? vscnprintf+0x5d/0x90 [ 1674.581040][T20700] panic+0x349/0x860 [ 1674.584959][T20700] ? check_panic_on_warn+0x21/0xb0 [ 1674.590086][T20700] ? __pfx_panic+0x10/0x10 [ 1674.594522][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.600177][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.605828][T20700] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1674.611829][T20700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1674.618172][T20700] ? print_report+0x502/0x550 [ 1674.622876][T20700] check_panic_on_warn+0x86/0xb0 [ 1674.627816][T20700] ? uprobe_mmap+0xb9a/0x11a0 [ 1674.633103][T20700] end_report+0x77/0x160 [ 1674.637360][T20700] kasan_report+0x154/0x180 [ 1674.641881][T20700] ? uprobe_mmap+0xb9a/0x11a0 [ 1674.646564][T20700] uprobe_mmap+0xb9a/0x11a0 [ 1674.651068][T20700] ? shmem_is_huge+0x28e/0x2f0 [ 1674.655859][T20700] ? __pfx_uprobe_mmap+0x10/0x10 [ 1674.660812][T20700] mmap_region+0x1891/0x2090 [ 1674.665416][T20700] ? mark_lock+0x9a/0x350 [ 1674.670383][T20700] ? __pfx_mmap_region+0x10/0x10 [ 1674.675340][T20700] ? mm_get_unmapped_area+0xa5/0xd0 [ 1674.680550][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.686187][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.691825][T20700] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 1674.697471][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.703105][T20700] ? cap_mmap_addr+0x163/0x2c0 [ 1674.707874][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.713507][T20700] ? __get_unmapped_area+0x2f0/0x360 [ 1674.718804][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.724438][T20700] do_mmap+0x8f9/0x1010 [ 1674.728607][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.734254][T20700] ? __pfx_do_mmap+0x10/0x10 [ 1674.738855][T20700] ? __pfx_down_write_killable+0x10/0x10 [ 1674.744501][T20700] ? __pfx_ima_file_mmap+0x10/0x10 [ 1674.749614][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.755249][T20700] ? security_mmap_file+0x178/0x1a0 [ 1674.760451][T20700] vm_mmap_pgoff+0x1dd/0x3d0 [ 1674.765069][T20700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1674.770204][T20700] ? __fget_files+0x29/0x470 [ 1674.774812][T20700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.780450][T20700] ? __fget_files+0x3f6/0x470 [ 1674.785145][T20700] ksys_mmap_pgoff+0x4f1/0x720 [ 1674.789922][T20700] ? __x64_sys_mmap+0x7f/0x140 [ 1674.794709][T20700] do_syscall_64+0xf3/0x230 [ 1674.799223][T20700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.805135][T20700] RIP: 0033:0x7f6304f773b9 [ 1674.809548][T20700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.829153][T20700] RSP: 002b:00007f6305c8d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1674.837573][T20700] RAX: ffffffffffffffda RBX: 00007f6305105f80 RCX: 00007f6304f773b9 [ 1674.845549][T20700] RDX: 0000000002000005 RSI: 0000000000400000 RDI: 0000000020000000 [ 1674.853520][T20700] RBP: 00007f6304fe48e6 R08: 0000000000000004 R09: 0000000000000000 [ 1674.861488][T20700] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1674.869456][T20700] R13: 000000000000000b R14: 00007f6305105f80 R15: 00007ffe73fc32f8 [ 1674.877439][T20700] [ 1674.880670][T20700] Kernel Offset: disabled [ 1674.884986][T20700] Rebooting in 86400 seconds..