last executing test programs: 2m47.714001043s ago: executing program 4 (id=4): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) 2m45.472860698s ago: executing program 4 (id=20): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3c, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x40}, 0x8005) mq_getsetattr(r2, &(0x7f0000000240)={0x2, 0x2, 0x0, 0x5}, &(0x7f00000003c0)) dup(r1) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback}}}}}}}, 0x0) 2m30.394057976s ago: executing program 32 (id=20): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3c, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x40}, 0x8005) mq_getsetattr(r2, &(0x7f0000000240)={0x2, 0x2, 0x0, 0x5}, &(0x7f00000003c0)) dup(r1) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback}}}}}}}, 0x0) 9.540227517s ago: executing program 5 (id=528): socket$caif_seqpacket(0x25, 0x5, 0x1) syz_open_dev$MSR(0x0, 0x5, 0x0) syz_emit_vhci(0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x80000b) getpid() syz_open_dev$media(0x0, 0x7ffffffe, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.942968324s ago: executing program 5 (id=537): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 6.577591277s ago: executing program 0 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x81, 0x8001, 0x8, 0x8}, 0x0, 0x1, 0x40, 0x6, 0x21, 0x7, 0x3, 0x0, 0x0, 0x400, {0x5, 0x7, 0x7, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.564489776s ago: executing program 5 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) 6.06221608s ago: executing program 0 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 5.667793912s ago: executing program 0 (id=544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.972806947s ago: executing program 3 (id=546): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000340)='./file1\x00', 0x145142, 0x94) sendfile(r0, r0, 0x0, 0x800000009) 4.799823028s ago: executing program 0 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x10004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000002040)='./file2\x00', 0x3800058, &(0x7f0000000000), 0x1, 0xb980, &(0x7f0000018c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.758101938s ago: executing program 3 (id=548): socket$caif_seqpacket(0x25, 0x5, 0x1) syz_open_dev$MSR(0x0, 0x5, 0x0) syz_emit_vhci(0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x80000b) getpid() syz_open_dev$media(0x0, 0x7ffffffe, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.612206856s ago: executing program 0 (id=550): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e26, 0x8001, @mcast1, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x10, 0x1, 0x51, 0xfffffffb}}], 0x10}, 0x4c040) 3.612111056s ago: executing program 1 (id=551): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) eventfd2(0x0, 0x0) 3.504584427s ago: executing program 1 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x81, 0x8001, 0x8, 0x8}, 0x0, 0x1, 0x40, 0x6, 0x21, 0x7, 0x3, 0x0, 0x0, 0x400, {0x5, 0x7, 0x7, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.285158158s ago: executing program 5 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000200000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.192433599s ago: executing program 1 (id=554): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@umask={'umask', 0x3d, 0xffff}}, {@gid}, {@umask={'umask', 0x3d, 0x7f}}, {@rootdir={'rootdir', 0x3d, 0x7fff}}, {@volume={'volume', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0xf}}, {@mode={'mode', 0x3d, 0x1}}, {@fileset={'fileset', 0x3d, 0x7}}, {@partition={'partition', 0x3d, 0x673}}, {@volume={'volume', 0x3d, 0xfffffffefffffffe}}, {@umask={'umask', 0x3d, 0x6}}], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x34, 0x37, 0x61, 0x34, 0x37, 0x39, 0x65], 0x2d, [0x30, 0x66, 0x35, 0x32], 0x2d, [0x64, 0x63, 0x31, 0x64], 0x2d, [0x62, 0x31, 0x39, 0x52], 0x2d, [0x63, 0x37, 0x35, 0x34, 0x38, 0x37, 0x62, 0x62]}}}]}, 0x1, 0xc29, &(0x7f0000001940)="$eJzs3U9sHOd5B+D32yEtUm6ateMof5TDAg4QV44NUpQtFnIAKmKIGBBkwRRzMFCAK5FSFyaXFEkVclCkKpCgCNIWKnLIsQKcAL1VpxYIGkA9uUUQgOip6KFQW0dwb5sAaYsezGJ2vyWXtCSylkRS1vMI0m929p3db9Z8uTPrmZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Eih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7SvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//fHez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fmOgfXs1Ir4YER+ulX8i/mdtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+v2Vu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9ufBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN/9/n2+fApDt713Piy7k8jxej/Hst11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfxYpjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/2+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zl59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/PlI8+3uba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/ZNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/r5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT48+tfynWd3jua73+m/e9G/38/UvzOpzbXvpJrn92oHd7pasFeKvv/HyPF6u1/Xv+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfI//O1gCfN8jvffrs+Nze7ZMKECRPrE3v9mwl41Mrt//+KFF+7XKTufmze/v+tzq2N/f///s7G9v+JLbluj7b/n+2ZdyLvtfT3RQyszC/2fy5iYPmdb7/UmK9fmr002xwZGT3+u8eGjx4f7n+qu3O/MbXj1w4ed2X/vx0pfvLX/7T+Ofbm/f+7f/53cEuu26P+/0zvOm3ar9nxSwFPnLL//ypS/MuND9b/f9P9Pv/rfs73wvObc7BbtEf9/1zPvFr+Z7Rn3gtFxMmdPhcAAAAAAAAAADwmDqYifhYp/qb1D+vXvN98/E98uVvbe/zfveyH6/8DAPdXvv9PRoqfH/xq6n6HzE6O/5/Zkuv26PjfQz3zZnbpvOYdv8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAxpSjiQKR49wetdLsob3cMnG40r1ydGp+4+2KDKVJUomjXl38Hho+OHHvl1eOj3bz/8g/bF+KNyXMna6cW5heXZpeXZ2dqU83GhYWZ2R0/woMuv9WR9gtQm3/7yszFi8u1oy+PbLr7avXOgacPVU+MHh55q1s7NT4xMdlT09f/sZ/9I9LDeyg+QZ6KIn4eKd576YP0b0VEJR68F7b53fGoDUZf2X/tlZgan2ivyFyj3lwp70yVXNUXUe1ZaKzbI7vQiw9kLOJaRFTKAR8pV29ysb5UPz83WztbX1pprDQWmqnSGW25PtWoxGiKWIyIVrHXg2e/6Y8i/jZS3Pl1K/17EVF0++DFM5NvDo1s/wB9uzDIezxttYhYjcegZ2GfOhBFPBcpfjg9FP9RdPqq3TbvR3ylzNciLpd5K8X1fDuVvyBGI37l/QQea31RxNlIsZBa6f0i9357u/L0t2qvNy8udMr+KNrbzvkd9XHfP9hNtk3YxwaiiF+2t/hb6ZfezwEAAAAAAAAAAABgnyvia5Hi5vwLqX1+6Po5pY3mpdq5+vm5zmH93WP/a3mptbW1tWrqZC3nUM6xnGdzTudczHkt5/WcN3LezHkr52rO2zlbOaOSnz9nLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5w3HSAAAAAAAAAAAAAAAAAAA8IpUo4nuR4ke/aaW1onN92eno5G3nucIn2v8FAAD//+X2R4U=") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) 2.853159161s ago: executing program 3 (id=555): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x4, 0xd, 0x2, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x30323953}) 2.772191161s ago: executing program 1 (id=556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0xfe, 0x8, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6, 0x800000000000}, {0xfffffff9, 0x4104, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0xc, 0xff, 0x2, 0x0, 0x800000000000000}, {0xffffff01, 0x2, 0x0, 0x0, 0x5, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x2, 0x4}], 0x3}) 2.726997491s ago: executing program 3 (id=557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.057054946s ago: executing program 1 (id=558): r0 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) 1.884070037s ago: executing program 0 (id=559): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0x7ff, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.878273067s ago: executing program 1 (id=560): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(0x0, 0xfefffffa, 0x165400) 1.822670127s ago: executing program 3 (id=561): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.744128188s ago: executing program 2 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 1.603125629s ago: executing program 3 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) 1.582322229s ago: executing program 2 (id=564): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40002121, 0x0, 0x0) 1.41585976s ago: executing program 2 (id=565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x81, 0x8001, 0x8, 0x8}, 0x0, 0x1, 0x40, 0x6, 0x21, 0x7, 0x3, 0x0, 0x0, 0x400, {0x5, 0x7, 0x7, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.132361962s ago: executing program 2 (id=566): socket$caif_seqpacket(0x25, 0x5, 0x1) syz_open_dev$MSR(0x0, 0x5, 0x0) syz_emit_vhci(0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x80000b) getpid() syz_open_dev$media(0x0, 0x7ffffffe, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 594.778976ms ago: executing program 5 (id=567): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 400.057287ms ago: executing program 5 (id=568): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f5b, &(0x7f0000003100)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)=r1}, 0x20) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r5, 0x5452, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 280.697107ms ago: executing program 2 (id=569): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x9, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10020a0, &(0x7f0000000080)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) fcntl$setstatus(r0, 0x4, 0x6000) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) 0s ago: executing program 2 (id=570): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.328736][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.342200][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.354968][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.363300][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.381142][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.389827][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.399665][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.409348][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.420602][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.430244][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.461535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.470979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.479495][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.486619][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.496785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.505784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.514538][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.521707][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.529472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.538619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.547746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.556489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.565649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.575477][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.598076][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.606720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.615911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.625320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.639225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.648388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.656855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.665507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.678889][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.688231][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.708890][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.723610][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.733484][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.743790][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.750930][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.759339][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.768600][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.777148][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.784251][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.793008][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.801890][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.817605][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.836633][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.848796][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.862069][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.871947][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.881107][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.889483][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.899608][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.908503][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.935407][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.963542][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.971990][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.990524][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.022188][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.038915][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.054676][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.064789][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.080983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.089768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.099703][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.107085][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.138243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.148183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.158068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.172156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.183348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.193815][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.201055][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.209833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.263571][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.276928][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.289065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.299724][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.306480][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.332478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.342053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.351085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.359530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.368303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.375852][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 71.380494][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 71.383034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.388499][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 71.395661][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 71.408170][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 71.434347][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.466964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.478661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.491304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.506697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.514802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.522852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.532416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.540006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.552762][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.562820][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.586572][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.603456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.617619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.626732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.642168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.654706][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.661855][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.671535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.680609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.689034][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.696144][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.704650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.724119][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.736398][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.758773][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.767994][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.777871][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.788927][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.799279][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.807118][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.820550][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.829342][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.862227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.878143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.888261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.898976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.908797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.917710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.951718][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.961977][ T4188] device veth0_vlan entered promiscuous mode [ 71.971356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.980441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.988379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.997765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.007322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.018026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.027130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.035983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.044944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.062102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.071670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.098257][ T4188] device veth1_vlan entered promiscuous mode [ 72.110519][ T4184] device veth0_vlan entered promiscuous mode [ 72.117943][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.127801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.137726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.146903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.171539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.180478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.189275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.198662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.206973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.235224][ T4187] device veth0_vlan entered promiscuous mode [ 72.251911][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.268869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.278283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.293814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.304669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.316680][ T4184] device veth1_vlan entered promiscuous mode [ 72.331968][ T4188] device veth0_macvtap entered promiscuous mode [ 72.345332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.354853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.363838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.374002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.383376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.395656][ T4187] device veth1_vlan entered promiscuous mode [ 72.415215][ T4188] device veth1_macvtap entered promiscuous mode [ 72.448230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.457647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.468716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.477953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.486925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.512870][ T4184] device veth0_macvtap entered promiscuous mode [ 72.524734][ T4184] device veth1_macvtap entered promiscuous mode [ 72.536567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.545836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.554289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.563558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.584956][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.604836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.614614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.636777][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.655982][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.668697][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.682208][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.690293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.697807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.705862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.714921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.724713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.734628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.744006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.753155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.766728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.775176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.786358][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.796725][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.805795][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.815767][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.831741][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.841059][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.852465][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.866632][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.882452][ T4192] device veth0_vlan entered promiscuous mode [ 72.912358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.921425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.932631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.946874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.957216][ T4187] device veth0_macvtap entered promiscuous mode [ 72.966316][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.977881][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.987478][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.996767][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.029798][ T4187] device veth1_macvtap entered promiscuous mode [ 73.044846][ T4192] device veth1_vlan entered promiscuous mode [ 73.134809][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.149687][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.167742][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.178391][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.190382][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.200603][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.214930][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.225355][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.236113][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247930][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.265179][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.275940][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.285861][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.302784][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.314677][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.324053][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.354269][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.363660][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.374899][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.383925][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.437352][ T479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.448861][ T479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.465504][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 73.471250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.471937][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 73.482889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.486294][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 73.499049][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 73.501255][ T4192] device veth0_macvtap entered promiscuous mode [ 73.505734][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 73.524215][ T4192] device veth1_macvtap entered promiscuous mode [ 73.554416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.563242][ T479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.572630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.576710][ T479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.582283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.597060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.605978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.640324][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.649067][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.655682][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.674254][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.684258][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.695725][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.705895][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.718081][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.729503][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.753425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.762452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.773663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.783002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.792727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.803806][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.814757][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.824964][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.835475][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846181][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.857821][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869011][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.886922][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.896584][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.906415][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.915276][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.947823][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.976090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.989150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.997115][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.004712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.005551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.024161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.048804][ T4183] device veth0_vlan entered promiscuous mode [ 74.069655][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.098182][ T4183] device veth1_vlan entered promiscuous mode [ 74.117644][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.190571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.241166][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.288673][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.309729][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.320184][ T479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.328248][ T479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.739256][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.786515][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.801329][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.811946][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.839118][ T4183] device veth0_macvtap entered promiscuous mode [ 74.862909][ T4183] device veth1_macvtap entered promiscuous mode [ 74.888936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.941812][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.118360][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.150982][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.532171][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 75.755276][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.015745][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 76.022376][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 76.028881][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 76.035453][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 76.106332][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.119407][ T4315] loop2: detected capacity change from 0 to 7 [ 76.189740][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.206356][ T4306] Dev loop2: unable to read RDB block 7 [ 76.213838][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.244650][ T4306] loop2: AHDI p1 p2 p3 [ 76.253011][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.270845][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.283001][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.289970][ T4306] loop2: partition table partially beyond EOD, truncated [ 76.293495][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 76.313754][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.339622][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.339801][ T4306] loop2: p1 start 1601398130 is beyond EOD, [ 76.372640][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.373583][ T4306] truncated [ 76.409257][ T4306] loop2: p2 start 1702059890 is beyond EOD, truncated [ 76.430571][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.470529][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.486732][ T4315] Dev loop2: unable to read RDB block 7 [ 76.502332][ T4315] loop2: AHDI p1 p2 p3 [ 76.508176][ T4315] loop2: partition table partially beyond EOD, truncated [ 76.522432][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.543921][ T4315] loop2: p1 start 1601398130 is beyond EOD, truncated [ 76.560006][ T4315] loop2: p2 start 1702059890 is beyond EOD, truncated [ 76.561830][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.622231][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.665207][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.681467][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.702496][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.722910][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.743131][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.776019][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.791322][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.847982][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.899656][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.917799][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.947200][ T4325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.970716][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.025256][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.079374][ T4325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.272229][ T4330] device syzkaller0 entered promiscuous mode [ 78.234939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 78.266002][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.300545][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.400914][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.584473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.594144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.672173][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.714324][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.789319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.798864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.809917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.819042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.828501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.888384][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.626014][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.692461][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 81.850066][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.428331][ T4364] loop4: detected capacity change from 0 to 64 [ 82.734839][ T4373] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.787627][ T4364] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 83.370381][ T4380] device syzkaller0 entered promiscuous mode [ 84.793438][ T4391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27'. [ 84.840941][ T4391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 86.307464][ T4406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 86.697404][ T1108] cfg80211: failed to load regulatory.db [ 86.906617][ T1111] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 86.935434][ T1111] Bluetooth: hci4: Injecting HCI hardware error event [ 86.968913][ T146] Bluetooth: hci4: hardware error 0x00 [ 87.131144][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 88.642110][ T4421] process 'syz.3.34' launched './file0' with NULL argv: empty string added [ 89.289752][ T4424] device syzkaller0 entered promiscuous mode [ 89.469896][ C1] sched: RT throttling activated [ 91.590864][ T4196] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 92.554952][ T4444] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 94.862926][ T4456] crypto_alloc_aead failed rc=-2 [ 96.118427][ T4491] device syzkaller0 entered promiscuous mode [ 99.582923][ T4505] crypto_alloc_aead failed rc=-2 [ 99.737564][ T21] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.835711][ T21] Bluetooth: hci3: Injecting HCI hardware error event [ 100.369732][ T146] Bluetooth: hci3: hardware error 0x00 [ 100.582327][ T4528] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.436840][ T4558] crypto_alloc_aead failed rc=-2 [ 103.841076][ T4551] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 103.870682][ T4551] netlink: 152 bytes leftover after parsing attributes in process `syz.0.63'. [ 103.933281][ T4551] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 104.018724][ T4575] tipc: Enabling of bearer rejected, failed to enable media [ 104.263695][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.287788][ T4576] device syzkaller0 entered promiscuous mode [ 104.506719][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.647837][ T4585] crypto_alloc_aead failed rc=-2 [ 104.922281][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.224432][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.250477][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 105.657481][ T4553] chnl_net:caif_netlink_parms(): no params data found [ 107.422370][ T4316] Bluetooth: hci0: command 0x041b tx timeout [ 107.762418][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.769740][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.893328][ T4553] device bridge_slave_0 entered promiscuous mode [ 109.030856][ T4634] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.066926][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.090594][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.110756][ T4553] device bridge_slave_1 entered promiscuous mode [ 109.146560][ T4638] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 109.154476][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.185460][ T4638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.250264][ T4638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.449792][ T4553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.558784][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 109.561789][ T4553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.757594][ T4553] team0: Port device team_slave_0 added [ 109.787066][ T4553] team0: Port device team_slave_1 added [ 109.846685][ T4655] tipc: Enabling of bearer rejected, failed to enable media [ 109.858438][ T4659] device syzkaller0 entered promiscuous mode [ 109.870214][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.930510][ T1108] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.941586][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.957520][ T1108] usb 4-1: Product: syz [ 109.962451][ T4553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.969999][ T4553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.004218][ T1108] usb 4-1: Manufacturer: syz [ 110.008952][ T1108] usb 4-1: SerialNumber: syz [ 110.022691][ T4553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.052553][ T4553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.061185][ T4553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.096216][ T4553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.236724][ T4553] device hsr_slave_0 entered promiscuous mode [ 110.243874][ T4553] device hsr_slave_1 entered promiscuous mode [ 110.261510][ T4553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.269226][ T4553] Cannot create hsr debugfs directory [ 110.310293][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.319085][ T13] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.346245][ T4633] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 110.389098][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.420168][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 110.439934][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 110.594199][ T1108] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 110.620234][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.465807][ T1108] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 111.477871][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.485972][ T13] usb 3-1: Product: syz [ 111.490421][ T13] usb 3-1: Manufacturer: syz [ 111.520018][ T1108] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 111.561150][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 111.566615][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 111.610098][ T1108] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.622999][ T4250] Bluetooth: hci0: command 0x0419 tx timeout [ 111.874059][ T4677] crypto_alloc_aead failed rc=-2 [ 113.402668][ T13] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 113.422384][ T1108] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 113.431243][ T13] cdc_wdm 3-1:1.0: Unknown control protocol [ 113.442150][ T1108] lan78xx: probe of 4-1:1.0 failed with error -71 [ 113.460489][ T13] usb 3-1: USB disconnect, device number 2 [ 113.539291][ T1108] usb 4-1: USB disconnect, device number 2 [ 113.876129][ T4700] crypto_alloc_aead failed rc=-2 [ 116.310887][ T4730] loop5: detected capacity change from 0 to 7 [ 116.328678][ T4730] Dev loop5: unable to read RDB block 7 [ 116.720166][ T4730] loop5: unable to read partition table [ 116.726171][ T4730] loop5: partition table beyond EOD, truncated [ 116.774333][ T4730] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.796787][ T144] device hsr_slave_0 left promiscuous mode [ 116.810050][ T144] device hsr_slave_1 left promiscuous mode [ 116.846921][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.854874][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.917247][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.935143][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.970748][ T144] device bridge_slave_1 left promiscuous mode [ 116.988112][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.017027][ T144] device bridge_slave_0 left promiscuous mode [ 117.034781][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.118918][ T144] device veth1_macvtap left promiscuous mode [ 117.143955][ T144] device veth0_macvtap left promiscuous mode [ 117.160298][ T144] device veth1_vlan left promiscuous mode [ 117.191327][ T144] device veth0_vlan left promiscuous mode [ 118.351062][ T4250] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.405346][ T144] team0 (unregistering): Port device team_slave_1 removed [ 118.413457][ T4750] crypto_alloc_aead failed rc=-2 [ 118.461593][ T144] team0 (unregistering): Port device team_slave_0 removed [ 118.560087][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.689706][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.970358][ T4769] crypto_alloc_aead failed rc=-2 [ 118.977567][ T4250] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 119.080103][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.088162][ T4250] usb 1-1: Product: syz [ 119.182154][ T4250] usb 1-1: Manufacturer: syz [ 119.186801][ T4250] usb 1-1: SerialNumber: syz [ 119.307416][ T144] bond0 (unregistering): Released all slaves [ 119.403123][ T4743] tipc: Enabling of bearer rejected, failed to enable media [ 119.485467][ T4553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.507822][ T4553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.572521][ T4553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.610102][ T4250] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 119.624267][ T4553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.690269][ T4250] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 119.725590][ T4786] tipc: Enabling of bearer rejected, failed to enable media [ 119.753595][ T4250] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 119.776312][ T4791] device syzkaller0 entered promiscuous mode [ 119.814093][ T4250] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 119.848158][ T4250] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.880094][ T4250] lan78xx: probe of 1-1:1.0 failed with error -71 [ 119.900126][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.936074][ T4250] usb 1-1: USB disconnect, device number 2 [ 120.221753][ T4553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.920887][ T4553] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.950269][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.958943][ T13] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.972914][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.980196][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.980264][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.980292][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 121.260838][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.720982][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.073458][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.082645][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.091220][ T13] usb 4-1: Product: syz [ 122.095426][ T13] usb 4-1: Manufacturer: syz [ 122.108549][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.136083][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.143310][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.171138][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 122.176716][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 122.259300][ T4553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.379993][ T4553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.402914][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 122.408925][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 122.484928][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.493859][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.502952][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.530704][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.535259][ T13] usb 4-1: USB disconnect, device number 3 [ 122.537812][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.243837][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.308517][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.402639][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.425028][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.441091][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.608187][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.668011][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.709299][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.771045][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.843157][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.237169][ T4839] crypto_alloc_aead failed rc=-2 [ 124.504124][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.058885][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.331642][ T4871] tipc: Enabling of bearer rejected, failed to enable media [ 126.493754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.586245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.720093][ T4553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.010935][ T23] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 128.019261][ T23] Bluetooth: hci2: Injecting HCI hardware error event [ 128.070360][ T146] Bluetooth: hci2: hardware error 0x00 [ 128.430647][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.455123][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.572166][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.587237][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.606496][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.626367][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.664224][ T4553] device veth0_vlan entered promiscuous mode [ 128.702780][ T4553] device veth1_vlan entered promiscuous mode [ 128.810359][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.820960][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.842312][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.876864][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.921788][ T4553] device veth0_macvtap entered promiscuous mode [ 128.943430][ T4553] device veth1_macvtap entered promiscuous mode [ 129.149811][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.209968][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.259969][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.311255][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.344580][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.392195][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.434466][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.467446][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.502030][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.547444][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.565567][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.611355][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.653464][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.722890][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.771514][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.782196][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.814975][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.847784][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.887486][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.934468][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.973766][ T4939] crypto_alloc_aead failed rc=-2 [ 130.389773][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.580049][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.650448][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.659572][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.848333][ T4553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.875742][ T4553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.885949][ T4553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.296745][ T4553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.739528][ T4970] tipc: Enabling of bearer rejected, failed to enable media [ 132.790428][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796780][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.881498][ T4970] device syzkaller0 entered promiscuous mode [ 134.126695][ T5002] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 134.257478][ T3098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.314258][ T3098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.371868][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.409622][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.460437][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.510431][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.011713][ T5013] crypto_alloc_aead failed rc=-2 [ 136.180127][ T5038] tmpfs: Unknown parameter 'usrquota' [ 137.395610][ T5057] tipc: Enabling of bearer rejected, failed to enable media [ 137.456605][ T5060] device syzkaller0 entered promiscuous mode [ 138.821308][ T5083] crypto_alloc_aead failed rc=-2 [ 142.237561][ T5134] tipc: Enabling of bearer rejected, failed to enable media [ 142.399516][ T5134] device syzkaller0 entered promiscuous mode [ 142.764943][ T5144] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.361835][ T5149] crypto_alloc_aead failed rc=-2 [ 146.383407][ T5187] ======================================================= [ 146.383407][ T5187] WARNING: The mand mount option has been deprecated and [ 146.383407][ T5187] and is ignored by this kernel. Remove the mand [ 146.383407][ T5187] option from the mount to silence this warning. [ 146.383407][ T5187] ======================================================= [ 146.531939][ T5193] tipc: Enabling of bearer rejected, failed to enable media [ 146.776413][ T5193] device syzkaller0 entered promiscuous mode [ 147.433968][ T5209] crypto_alloc_aead failed rc=-2 [ 148.951614][ T5229] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.640040][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.700976][ T4808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.040383][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.090203][ T4808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.101440][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.127994][ T4808] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 150.158083][ T4808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.300109][ T23] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 150.309466][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.041265][ T23] usb 1-1: Product: syz [ 151.046745][ T4808] usb 6-1: config 0 descriptor?? [ 151.053684][ T23] usb 1-1: Manufacturer: syz [ 151.058415][ T23] usb 1-1: SerialNumber: syz [ 151.084546][ T23] usb 1-1: config 0 descriptor?? [ 151.123648][ T23] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 151.161705][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.190607][ T23] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 151.210744][ T23] usb 1-1: media controller created [ 151.251536][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.520661][ T23] DVB: Unable to find symbol tda10046_attach() [ 151.532690][ T4808] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 151.557973][ T23] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 151.577605][ T4808] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 151.587705][ T23] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 151.609609][ T4808] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 151.630305][ T4808] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 151.638218][ T4808] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 151.646162][ T4808] hid-picolcd 0003:04D8:C002.0001: item fetching failed at offset 5/7 [ 151.655364][ T4808] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 151.663566][ T4808] hid-picolcd: probe of 0003:04D8:C002.0001 failed with error -22 [ 151.701061][ T5278] crypto_alloc_aead failed rc=-2 [ 151.760751][ T21] usb 6-1: USB disconnect, device number 2 [ 152.140165][ T4808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.481808][ T5305] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 152.755977][ T23] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 152.769607][ T23] usb 1-1: USB disconnect, device number 3 [ 152.810469][ T4808] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.819660][ T4808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.859093][ T4808] usb 4-1: Product: syz [ 152.868289][ T4808] usb 4-1: Manufacturer: syz [ 152.882450][ T4808] usb 4-1: SerialNumber: syz [ 153.165558][ T5326] loop2: detected capacity change from 0 to 4096 [ 153.226453][ T5327] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.403199][ T5331] loop1: detected capacity change from 0 to 1024 [ 153.490689][ T5331] EXT4-fs (loop1): Ignoring removed bh option [ 153.601799][ T4808] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 153.632834][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 153.706066][ T4808] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 153.798598][ T5343] crypto_alloc_aead failed rc=-2 [ 153.837952][ T4808] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.929922][ T26] audit: type=1800 audit(1762523306.871:2): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.191" name="/newroot/48/bus" dev="tmpfs" ino=264 res=0 errno=0 [ 153.964525][ T5356] device syzkaller0 entered promiscuous mode [ 153.994226][ T4808] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 154.127125][ T4808] lan78xx: probe of 4-1:1.0 failed with error -71 [ 154.207405][ T4808] usb 4-1: USB disconnect, device number 4 [ 154.505217][ T5378] loop2: detected capacity change from 0 to 512 [ 154.620832][ T5378] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.675879][ T5378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.717204][ T5378] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.199: bad orphan inode 131083 [ 154.739809][ T5378] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 154.759949][ T5381] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 154.932657][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 155.247184][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 155.332593][ T5394] crypto_alloc_aead failed rc=-2 [ 155.571752][ T5411] loop3: detected capacity change from 0 to 512 [ 155.618556][ T5401] loop2: detected capacity change from 0 to 65536 [ 155.687535][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.748290][ T5401] XFS (loop2): Mounting V5 Filesystem [ 155.771877][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 155.782733][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.791773][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.802072][ T5426] device bridge_slave_0 left promiscuous mode [ 155.810363][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.820279][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.861317][ T5411] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mb_optimize_scan=0x0000000000000000,commit=0x0000000000000000,. Quota mode: writeback. [ 155.876734][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 155.896083][ T5426] device bridge_slave_1 left promiscuous mode [ 155.921853][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.939638][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.953029][ T5411] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.981823][ T5426] bond0: (slave bond_slave_0): Releasing backup interface [ 156.007349][ T5401] XFS (loop2): Ending clean mount [ 156.023544][ T5401] XFS (loop2): Quotacheck needed: Please wait. [ 156.117063][ T5426] bond0: (slave bond_slave_1): Releasing backup interface [ 156.143667][ T5401] XFS (loop2): Quotacheck: Done. [ 156.180315][ T13] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 156.197831][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 156.226794][ T13] usb 2-1: Product: syz [ 156.242866][ T13] usb 2-1: Manufacturer: syz [ 156.260754][ T5426] team0: Failed to send options change via netlink (err -105) [ 156.271912][ T13] usb 2-1: SerialNumber: syz [ 156.292509][ T4192] XFS (loop2): Unmounting Filesystem [ 156.310782][ T13] usb 2-1: config 0 descriptor?? [ 156.327576][ T5426] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 156.361785][ T13] ati_remote_probe: Unexpected desc.bNumEndpoints [ 156.371909][ T5426] team0: Port device team_slave_0 removed [ 156.542381][ T5426] team0: Failed to send options change via netlink (err -105) [ 156.621301][ T5426] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 156.695754][ T5426] team0: Port device team_slave_1 removed [ 156.721181][ T5451] loop5: detected capacity change from 0 to 40427 [ 156.730885][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.738619][ T5426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.747685][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.755333][ T5426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.848136][ T5429] team0: Failed to send options change via netlink (err -105) [ 156.878159][ T5429] team0: Mode changed to "loadbalance" [ 157.041621][ T5466] vivid-002: disconnect [ 157.048724][ T2302] usb 2-1: USB disconnect, device number 2 [ 157.110696][ T5465] vivid-002: reconnect [ 157.201114][ T1111] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.466657][ T5426] syz.0.208 (5426) used greatest stack depth: 20416 bytes left [ 157.480117][ T1111] usb 6-1: Using ep0 maxpacket: 32 [ 157.600234][ T1111] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 157.628666][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.662009][ T1111] usb 6-1: config 0 descriptor?? [ 158.090941][ T1111] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 158.106467][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.131725][ T1111] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 158.165787][ T5491] crypto_alloc_aead failed rc=-2 [ 158.336526][ T5502] loop0: detected capacity change from 0 to 40427 [ 158.365727][ T5522] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.381409][ T1111] usb 6-1: media controller created [ 158.394290][ T5523] loop8: detected capacity change from 0 to 8 [ 158.468660][ T5502] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 158.477459][ T5502] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 158.495201][ T5502] F2FS-fs (loop0): invalid crc value [ 158.514891][ T5523] Dev loop8: unable to read RDB block 8 [ 158.519364][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.526631][ T5523] loop8: unable to read partition table [ 158.553821][ T5502] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.570512][ T5523] loop8: partition table beyond EOD, truncated [ 158.587212][ T5523] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 158.629963][ T5502] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 158.637332][ T5502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.743713][ T1111] az6027: usb out operation failed. (-71) [ 158.790798][ T1111] az6027: usb out operation failed. (-71) [ 158.804492][ T1111] stb0899_attach: Driver disabled by Kconfig [ 158.840038][ T1111] az6027: no front-end attached [ 158.840038][ T1111] [ 158.880062][ T1111] az6027: usb out operation failed. (-71) [ 158.900015][ T1111] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 158.912656][ T4187] attempt to access beyond end of device [ 158.912656][ T4187] loop0: rw=2049, want=45112, limit=40427 [ 158.956133][ T1111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 159.047444][ T5540] loop2: detected capacity change from 0 to 512 [ 159.057467][ T1111] dvb-usb: schedule remote query interval to 400 msecs. [ 159.079927][ T1111] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 159.104347][ T1111] usb 6-1: USB disconnect, device number 3 [ 159.268806][ T1111] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.279415][ T5540] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 159.280557][ T5547] loop3: detected capacity change from 0 to 4096 [ 159.297837][ T5540] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.380803][ T26] audit: type=1800 audit(1762523312.321:3): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 159.479083][ T26] audit: type=1800 audit(1762523312.391:4): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 159.518100][ T5559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.660909][ T5564] loop1: detected capacity change from 0 to 512 [ 159.668433][ T26] audit: type=1804 audit(1762523312.611:5): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.228" name="/newroot/57/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 159.819058][ T5564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.820264][ T26] audit: type=1800 audit(1762523312.651:6): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.228" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 159.904615][ T5564] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.028107][ T5570] loop2: detected capacity change from 0 to 1024 [ 160.237135][ T5578] loop5: detected capacity change from 0 to 64 [ 160.334785][ T5574] device syzkaller0 entered promiscuous mode [ 160.355239][ T4272] hfsplus: b-tree write err: -5, ino 4 [ 160.380835][ T5572] crypto_alloc_aead failed rc=-2 [ 160.479018][ T5578] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 160.492863][ T5578] hfs: filesystem is marked locked, mounting read-only. [ 160.941378][ T5602] loop1: detected capacity change from 0 to 40427 [ 160.990317][ T5602] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 160.998618][ T5602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 161.099938][ T4259] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.150911][ T5602] F2FS-fs (loop1): invalid crc value [ 161.163709][ T5607] loop0: detected capacity change from 0 to 2048 [ 161.211639][ T5602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.262390][ T5616] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 161.290694][ T5607] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 161.308072][ T5602] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 161.315892][ T5602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.324905][ T4259] usb 4-1: device descriptor read/64, error -71 [ 161.332262][ T5607] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 161.362877][ T26] audit: type=1800 audit(1762523314.311:7): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 161.379066][ T5607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.435831][ T4184] attempt to access beyond end of device [ 161.435831][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 161.600130][ T4259] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.734628][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.757595][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.778422][ T5627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.800205][ T4259] usb 4-1: device descriptor read/64, error -71 [ 161.984671][ T5629] loop2: detected capacity change from 0 to 32768 [ 161.994657][ T4259] usb usb4-port1: attempt power cycle [ 162.222993][ T5633] crypto_alloc_aead failed rc=-2 [ 162.410408][ T4259] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.425760][ T5629] XFS (loop2): Mounting V5 Filesystem [ 162.594681][ T4259] usb 4-1: device descriptor read/8, error -71 [ 162.698537][ T5629] XFS (loop2): Ending clean mount [ 162.705446][ T5659] device syzkaller0 entered promiscuous mode [ 162.743039][ T5629] XFS (loop2): Quotacheck needed: Please wait. [ 162.775469][ T5666] loop0: detected capacity change from 0 to 256 [ 162.840062][ T5629] XFS (loop2): Quotacheck: Done. [ 162.873391][ T4259] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.980247][ T4259] usb 4-1: device descriptor read/8, error -71 [ 162.997552][ T4192] XFS (loop2): Unmounting Filesystem [ 163.100170][ T4259] usb usb4-port1: unable to enumerate USB device [ 163.257553][ T5672] loop1: detected capacity change from 0 to 32768 [ 163.332619][ T5672] (syz.1.251,5672,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 163.342540][ T5672] (syz.1.251,5672,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 163.668970][ T5685] loop5: detected capacity change from 0 to 2048 [ 164.201199][ T5685] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.295562][ T5696] crypto_alloc_aead failed rc=-2 [ 164.339323][ T5685] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.533653][ T5685] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 164.603061][ T5685] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 164.730252][ T4808] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.000616][ T5732] device syzkaller0 entered promiscuous mode [ 165.255508][ T4808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.277106][ T4808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.298132][ T4808] usb 2-1: Product: syz [ 165.308250][ T4808] usb 2-1: Manufacturer: syz [ 165.324496][ T4808] usb 2-1: SerialNumber: syz [ 165.356497][ T4808] usb 2-1: config 0 descriptor?? [ 165.478269][ T5718] loop0: detected capacity change from 0 to 32768 [ 165.525043][ T5718] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.261 (5718) [ 165.539973][ T4259] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.630265][ T4808] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.687826][ T5718] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 165.718760][ T5718] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 165.739301][ T5718] BTRFS info (device loop0): use zstd compression, level 3 [ 165.752285][ T5718] BTRFS info (device loop0): using free space tree [ 165.769167][ T5718] BTRFS info (device loop0): has skinny extents [ 165.920160][ T4259] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 165.938660][ T4259] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.970075][ T4259] usb 6-1: config 0 has no interface number 0 [ 165.976240][ T4259] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 166.060376][ T4259] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.083835][ T5718] BTRFS info (device loop0): enabling ssd optimizations [ 166.178015][ T5768] loop2: detected capacity change from 0 to 4096 [ 166.290344][ T4259] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 166.318058][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.327906][ T5778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.353243][ T4259] usb 6-1: Product: syz [ 166.367825][ T4259] usb 6-1: Manufacturer: syz [ 166.379988][ T4259] usb 6-1: SerialNumber: syz [ 166.417736][ T5768] syz.2.265 (5768) used greatest stack depth: 20048 bytes left [ 166.422561][ T4259] usb 6-1: config 0 descriptor?? [ 166.460164][ T5781] loop3: detected capacity change from 0 to 512 [ 166.472357][ T5738] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.508240][ T4259] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 166.559801][ T4259] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 166.627558][ T5781] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 166.655604][ T5781] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 166.667172][ T5781] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.267: Failed to acquire dquot type 1 [ 166.677151][ T4259] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 166.716559][ T5781] EXT4-fs (loop3): 1 truncate cleaned up [ 166.728493][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.741636][ T5781] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.771205][ T4259] usb 6-1: USB disconnect, device number 4 [ 166.943336][ T5795] loop2: detected capacity change from 0 to 2048 [ 166.984067][ T4259] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 166.999755][ T4259] cyberjack 6-1:0.69: device disconnected [ 167.045438][ T4808] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 167.091817][ T4808] usb 2-1: USB disconnect, device number 3 [ 167.150825][ T5795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 167.347436][ T5795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.399442][ T5800] crypto_alloc_aead failed rc=-2 [ 167.875383][ T5831] loop3: detected capacity change from 0 to 128 [ 167.897401][ T5821] loop1: detected capacity change from 0 to 1024 [ 167.973457][ T5833] loop0: detected capacity change from 0 to 128 [ 168.177751][ T5833] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 168.189347][ T5833] FAT-fs (loop0): Filesystem has been set read-only [ 168.250280][ T5831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.295714][ T5840] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 168.323470][ T5831] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.386798][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 168.446476][ T4865] hfsplus: b-tree write err: -5, ino 4 [ 168.920014][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.384026][ T2302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.520049][ T4227] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.531546][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.546622][ T4227] usb 1-1: Product: syz [ 169.555028][ T4227] usb 1-1: Manufacturer: syz [ 169.563066][ T4227] usb 1-1: SerialNumber: syz [ 169.641534][ T4227] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.800181][ T2302] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 169.828196][ T2302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.886368][ T2302] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.928963][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.959093][ T2302] usb 3-1: config 0 descriptor?? [ 170.046024][ T2302] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 170.460525][ T4294] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.788793][ T5878] device syzkaller0 entered promiscuous mode [ 170.906124][ T4227] usb 1-1: USB disconnect, device number 4 [ 171.185630][ T4250] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.620295][ T4294] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 171.631110][ T4294] ath9k_htc: Failed to initialize the device [ 171.660744][ T4227] usb 1-1: ath9k_htc: USB layer deinitialized [ 172.000127][ T4250] usb 4-1: Using ep0 maxpacket: 32 [ 172.136560][ T4259] usb 3-1: USB disconnect, device number 3 [ 172.248205][ T5904] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.254429][ T5898] loop0: detected capacity change from 0 to 8192 [ 172.280851][ T4250] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 172.299926][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.318272][ T4250] usb 4-1: Product: syz [ 172.330109][ T4250] usb 4-1: Manufacturer: syz [ 172.332754][ T5908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.334881][ T4250] usb 4-1: SerialNumber: syz [ 172.363705][ T4250] usb 4-1: config 0 descriptor?? [ 172.443774][ T5566] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 172.453744][ T5566] loop0: partition table partially beyond EOD, truncated [ 172.476776][ T5566] loop0: p1 start 100663296 is beyond EOD, truncated [ 172.502695][ T5566] loop0: p2 size 134217732 extends beyond EOD, truncated [ 172.549269][ T5566] loop0: p4 size 14876672 extends beyond EOD, truncated [ 172.572557][ T5566] loop0: p5 size 134217732 extends beyond EOD, truncated [ 172.586559][ T5566] loop0: p6 size 14876672 extends beyond EOD, truncated [ 172.662783][ T5898] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 172.678518][ T5898] loop0: partition table partially beyond EOD, truncated [ 172.701817][ T5898] loop0: p1 start 100663296 is beyond EOD, truncated [ 172.710331][ T5910] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 172.747495][ T5898] loop0: p2 size 134217732 extends beyond EOD, truncated [ 172.779182][ T5898] loop0: p4 size 14876672 extends beyond EOD, truncated [ 172.804100][ T5898] loop0: p5 size 134217732 extends beyond EOD, truncated [ 172.855257][ T5898] loop0: p6 size 14876672 extends beyond EOD, truncated [ 173.060208][ T4250] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 173.085045][ T4250] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 173.112583][ T4250] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 173.382019][ T5917] loop2: detected capacity change from 0 to 164 [ 173.601964][ T4250] peak_usb: probe of 4-1:0.0 failed with error -22 [ 173.921845][ T4250] usb 4-1: USB disconnect, device number 9 [ 173.935736][ T5917] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.073690][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 174.088656][ T5565] udevd[5565]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 174.094265][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 174.102820][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 174.110976][ T5917] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.153418][ T5566] udevd[5566]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 174.196312][ T5924] device syzkaller0 entered promiscuous mode [ 174.231436][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 174.234626][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 174.254744][ T4795] udevd[4795]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 174.263118][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 174.271140][ T5566] udevd[5566]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 174.433001][ T5928] UHID_CREATE from different security context by process 236 (syz.2.310), this is not allowed. [ 174.979969][ T2302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.003666][ T5940] netlink: 64 bytes leftover after parsing attributes in process `syz.5.315'. [ 175.073370][ T5942] capability: warning: `syz.1.316' uses 32-bit capabilities (legacy support in use) [ 175.390722][ T2302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.419646][ T2302] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 175.549778][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.798620][ T2302] usb 3-1: config 0 descriptor?? [ 176.002017][ T2302] pwc: Askey VC010 type 2 USB webcam detected. [ 176.185854][ T5956] loop8: detected capacity change from 0 to 8 [ 176.190006][ T4250] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 176.212093][ T5956] Dev loop8: unable to read RDB block 8 [ 176.217752][ T5956] loop8: unable to read partition table [ 176.225972][ T5956] loop8: partition table beyond EOD, truncated [ 176.242869][ T5956] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 176.294425][ T5958] loop1: detected capacity change from 0 to 512 [ 176.356021][ T5958] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.373254][ T2302] pwc: recv_control_msg error -32 req 02 val 2b00 [ 176.389527][ T5958] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 176.401962][ T5958] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.322: Corrupt directory, running e2fsck is recommended [ 176.430079][ T4250] usb 6-1: Using ep0 maxpacket: 16 [ 176.430340][ T2302] pwc: recv_control_msg error -32 req 02 val 2700 [ 176.453371][ T5962] device syzkaller0 entered promiscuous mode [ 176.463079][ T5958] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 176.481697][ T5958] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.322: corrupted in-inode xattr [ 176.510488][ T2302] pwc: recv_control_msg error -32 req 02 val 2c00 [ 176.540438][ T5958] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.322: couldn't read orphan inode 15 (err -117) [ 176.550341][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.568225][ T5958] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.journal_ioprio=0x0000000000000005,errors=remount-ro,jqfmt=vfsv1,grpid,nogrpid,errors=continue,,. Quota mode: writeback. [ 176.573472][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.600003][ T2302] pwc: recv_control_msg error -32 req 04 val 1000 [ 176.623320][ T5958] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.654993][ T5958] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 176.665702][ T4250] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 176.670429][ T2302] pwc: recv_control_msg error -32 req 04 val 1300 [ 176.679948][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.719097][ T5958] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.322: Corrupt directory, running e2fsck is recommended [ 176.734008][ T4250] usb 6-1: config 0 descriptor?? [ 176.742109][ T5965] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.759104][ T2302] pwc: recv_control_msg error -32 req 04 val 1400 [ 176.775960][ T5965] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 176.800111][ T2302] pwc: recv_control_msg error -32 req 02 val 2000 [ 176.806767][ T5965] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.322: Corrupt directory, running e2fsck is recommended [ 176.826781][ T5958] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.841669][ T5958] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 176.858954][ T5958] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.322: Corrupt directory, running e2fsck is recommended [ 176.879425][ T5966] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.130626][ T2302] pwc: recv_control_msg error -71 req 04 val 1500 [ 177.150003][ T2302] pwc: recv_control_msg error -71 req 02 val 2500 [ 177.170015][ T2302] pwc: recv_control_msg error -71 req 02 val 2400 [ 177.200896][ T2302] pwc: recv_control_msg error -71 req 02 val 2600 [ 177.231387][ T2302] pwc: recv_control_msg error -71 req 02 val 2900 [ 177.240340][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.247851][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.260260][ T2302] pwc: recv_control_msg error -71 req 02 val 2800 [ 177.286426][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.299960][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.301266][ T2302] pwc: recv_control_msg error -71 req 04 val 1100 [ 177.314403][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.327921][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.335606][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.343098][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.352200][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.352664][ T2302] pwc: recv_control_msg error -71 req 04 val 1200 [ 177.359720][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.373946][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.381490][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.389140][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.396704][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.416124][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.423586][ T2302] pwc: Registered as video103. [ 177.425782][ T2302] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 177.439736][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.454465][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.468847][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.484397][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.497207][ T2302] usb 3-1: USB disconnect, device number 4 [ 177.502056][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.536065][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.557087][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.579677][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.593945][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.603131][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.617036][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.626772][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.647100][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.669657][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.678221][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.691871][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.699320][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.720805][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.728354][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.749126][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.757227][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.771876][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.779404][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.792830][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.804515][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.816994][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.827226][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.839786][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.858610][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.867621][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.881299][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.889182][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.902971][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.914255][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.925772][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.935983][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.947478][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.957801][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.969127][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.979352][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 177.994090][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.003125][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.016518][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.025817][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.038382][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.047596][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.061494][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.069054][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.083137][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.093237][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.105506][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.115849][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.127822][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.138075][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.149356][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.159556][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.178947][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.188004][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.201807][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.209342][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.217303][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.226672][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.234452][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.242356][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.250564][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.258080][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.265998][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.280033][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.287573][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.303732][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.311579][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.319170][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.328289][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.342529][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.362758][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.372947][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.383265][ T5988] loop3: detected capacity change from 0 to 2048 [ 178.384329][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.403825][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.412512][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.438024][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.466607][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.502170][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.509634][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.532965][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.543971][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.553929][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.565040][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.597853][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.617325][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.644143][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.682965][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.706160][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.730411][ T5993] loop2: detected capacity change from 0 to 64 [ 178.733168][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.744704][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.765799][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.775063][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.797476][ T5993] MINIX-fs: bad superblock [ 178.809491][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.901275][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 178.972877][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.030751][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.069476][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.111691][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.151835][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.190825][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.231105][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.271743][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.309472][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.361252][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.369033][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.383051][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.393560][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.405061][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.418940][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.432824][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.445740][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.459007][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.469335][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.497310][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.504890][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.517866][ T5996] device syzkaller0 entered promiscuous mode [ 179.517863][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.517895][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.558087][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.565709][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.573331][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.580834][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.588247][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.595833][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.604325][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.611837][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.619367][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.626908][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.634714][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.642400][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.649820][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.657818][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.665311][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.673238][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.680735][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.688147][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.695623][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.703192][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.710706][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.718121][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.725611][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.733164][ T4250] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 179.759343][ T4250] hid-generic 0003:0458:5016.0002: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 179.774711][ T4250] usb 6-1: USB disconnect, device number 5 [ 179.976986][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 179.982561][ T5999] fido_id[5999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 180.151822][ T6008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.338'. [ 180.211920][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 180.229945][ T2302] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 180.432475][ T6017] loop0: detected capacity change from 0 to 512 [ 180.561237][ T6017] EXT4-fs (loop0): Ignoring removed oldalloc option [ 180.608114][ T6017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 180.616715][ T2302] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 180.629679][ T2302] usb 3-1: config 0 has no interface number 0 [ 180.636597][ T2302] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 63725, setting to 64 [ 180.640079][ T6017] System zones: 1-3, 19-19, 35-38 [ 180.722504][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noinit_itable,barrier=0x0000000000000040,oldalloc,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 180.740601][ T2302] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 180.749988][ T2302] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 180.750622][ T6017] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.758141][ T2302] usb 3-1: Manufacturer: syz [ 180.776842][ T2302] usb 3-1: config 0 descriptor?? [ 180.800437][ T5993] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.823349][ T2302] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input8 [ 181.046428][ T23] usb 3-1: USB disconnect, device number 5 [ 181.052501][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 181.541344][ T6032] loop5: detected capacity change from 0 to 40427 [ 181.645688][ T6032] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 183.910606][ T6054] device syzkaller0 entered promiscuous mode [ 185.090005][ T2302] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 185.168799][ T6075] loop2: detected capacity change from 0 to 512 [ 185.524170][ T6075] EXT4-fs (loop2): Test dummy encryption mode enabled [ 185.549628][ T6075] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 185.612242][ T6075] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 185.627956][ T6085] crypto_alloc_aead failed rc=-2 [ 185.652831][ T6075] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 185.690204][ T2302] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.734135][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.755429][ T2302] usb 4-1: Product: syz [ 185.768176][ T6103] mmap: syz.2.358 (6103) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 185.792230][ T2302] usb 4-1: Manufacturer: syz [ 185.796970][ T2302] usb 4-1: SerialNumber: syz [ 185.822071][ T2302] usb 4-1: config 0 descriptor?? [ 186.041732][ T6075] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 186.080121][ T2302] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.107201][ T6104] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 187.094598][ T4227] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.112996][ T2302] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 188.232233][ T2302] usb 4-1: USB disconnect, device number 10 [ 189.817604][ T6142] loop3: detected capacity change from 0 to 32768 [ 189.831429][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 189.865297][ T6142] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (6142) [ 190.040639][ T6149] device syzkaller0 entered promiscuous mode [ 190.067115][ T6142] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 190.076744][ T6142] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.086212][ T6142] BTRFS info (device loop3): use zstd compression, level 3 [ 190.093540][ T6142] BTRFS info (device loop3): using free space tree [ 190.100603][ T6142] BTRFS info (device loop3): has skinny extents [ 190.992497][ T6142] BTRFS info (device loop3): enabling ssd optimizations [ 191.403219][ T5566] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5566) [ 191.770269][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 192.583984][ T6202] sctp: failed to load transform for md5: -2 [ 193.636175][ T6197] Process accounting resumed [ 194.182102][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189232][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.090076][ T6233] loop1: detected capacity change from 0 to 40427 [ 195.150680][ T6233] F2FS-fs (loop1): invalid crc value [ 195.198669][ T6233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.260427][ T6233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.384033][ T4184] attempt to access beyond end of device [ 195.384033][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 195.392299][ T6241] device syzkaller0 entered promiscuous mode [ 195.873786][ T6248] loop2: detected capacity change from 0 to 1024 [ 196.077518][ T6248] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 196.105952][ T6248] EXT4-fs (loop2): orphan cleanup on readonly fs [ 196.365361][ T6248] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.387: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.830429][ T6248] EXT4-fs (loop2): 1 orphan inode deleted [ 196.873718][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.682869][ T6278] loop5: detected capacity change from 0 to 32768 [ 199.746750][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.395 (6278) [ 199.763310][ T6278] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 199.772189][ T6278] BTRFS info (device loop5): turning on flush-on-commit [ 199.779210][ T6278] BTRFS info (device loop5): max_inline at 0 [ 199.785321][ T6278] BTRFS info (device loop5): enabling disk space caching [ 199.792434][ T6278] BTRFS info (device loop5): setting nodatasum [ 199.798671][ T6278] BTRFS info (device loop5): turning off barriers [ 199.805236][ T6278] BTRFS info (device loop5): disabling tree log [ 199.811748][ T6278] BTRFS info (device loop5): enabling ssd optimizations [ 199.818734][ T6278] BTRFS info (device loop5): force clearing of disk cache [ 199.821488][ T6281] device syzkaller0 entered promiscuous mode [ 199.826582][ T6278] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 199.841953][ T6278] BTRFS info (device loop5): use zstd compression, level 3 [ 199.849262][ T6278] BTRFS info (device loop5): max_inline at 0 [ 199.855443][ T6278] BTRFS info (device loop5): disk space caching is enabled [ 199.862707][ T6278] BTRFS info (device loop5): has skinny extents [ 200.291348][ T6278] BTRFS info (device loop5): clearing free space tree [ 200.298923][ T6278] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.311032][ T6278] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.367173][ T6278] BTRFS info (device loop5): checking UUID tree [ 201.217876][ T6319] loop3: detected capacity change from 0 to 2048 [ 201.267790][ T6318] loop0: detected capacity change from 0 to 2048 [ 201.286313][ T6319] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 201.359147][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.413271][ T6321] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.690890][ T6351] tipc: Enabling of bearer rejected, failed to enable media [ 205.418351][ T6372] loop1: detected capacity change from 0 to 32768 [ 205.493874][ T4306] loop1: p1 p2 p3 < p5 p6 > [ 205.501395][ T4306] loop1: p2 size 16775168 extends beyond EOD, truncated [ 205.537233][ T4306] loop1: p5 start 4294970168 is beyond EOD, truncated [ 205.592988][ T6372] loop1: p1 p2 p3 < p5 p6 > [ 205.598816][ T6372] loop1: p2 size 16775168 extends beyond EOD, truncated [ 205.607999][ T6372] loop1: p5 start 4294970168 is beyond EOD, truncated [ 207.775270][ T6389] loop1: detected capacity change from 0 to 32768 [ 207.922546][ T6389] overlayfs: upper fs needs to support d_type. [ 207.929303][ T6389] overlayfs: upper fs does not support tmpfile. [ 207.963475][ T6389] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.062534][ T4184] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 208.062534][ T4184] [ 208.140041][ T4184] ERROR: (device loop1): remounting filesystem as read-only [ 208.300870][ T5565] udevd[5565]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 208.300988][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 208.323856][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 208.353924][ T5566] udevd[5566]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 208.555558][ T5565] udevd[5565]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 208.556318][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 208.569169][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 208.587186][ T5566] udevd[5566]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 210.094614][ T6410] loop2: detected capacity change from 0 to 32768 [ 210.135555][ T6409] tipc: Started in network mode [ 210.140884][ T6409] tipc: Node identity fe9e4144b9bb, cluster identity 4711 [ 210.155515][ T6409] tipc: Enabled bearer , priority 0 [ 210.184931][ T6409] tipc: Resetting bearer [ 210.253680][ T6407] tipc: Disabling bearer [ 213.367610][ T6443] crypto_alloc_aead failed rc=-2 [ 214.031288][ T6474] tipc: Enabled bearer , priority 0 [ 214.074752][ T6474] tipc: Resetting bearer [ 214.113035][ T6473] tipc: Disabling bearer [ 214.284777][ T6476] loop0: detected capacity change from 0 to 4096 [ 215.562193][ T6480] infiniband syz1: set active [ 215.568384][ T6480] infiniband syz1: added syz_tun [ 215.629990][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.688070][ T6480] infiniband syz1: Couldn't open port 1 [ 215.720198][ T6500] loop0: detected capacity change from 0 to 64 [ 215.866427][ T6480] RDS/IB: syz1: added [ 215.891641][ T6480] smc: adding ib device syz1 with port count 1 [ 215.926575][ T6480] smc: ib device syz1 port 1 has pnetid [ 216.153774][ T21] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 216.174958][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.600159][ T21] usb 2-1: Product: syz [ 216.604396][ T21] usb 2-1: Manufacturer: syz [ 216.609025][ T21] usb 2-1: SerialNumber: syz [ 216.631689][ T21] usb 2-1: config 0 descriptor?? [ 216.672275][ T21] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 216.711475][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.760276][ T21] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 216.779685][ T21] usb 2-1: media controller created [ 216.879660][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.961824][ T21] DVB: Unable to find symbol mt352_attach() [ 218.262699][ T21] DVB: Unable to find symbol nxt6000_attach() [ 218.268924][ T21] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 218.362091][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 218.415807][ T21] dvb-usb: schedule remote query interval to 1000 msecs. [ 218.471011][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 218.527094][ T6544] tipc: Enabling of bearer rejected, failed to enable media [ 218.546932][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 218.598294][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 218.860583][ T21] usb 2-1: USB disconnect, device number 4 [ 219.393801][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 219.463061][ T6558] zonefs (nullb0) ERROR: Not a zoned block device [ 220.542335][ T6565] crypto_alloc_aead failed rc=-2 [ 222.177745][ T6597] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 222.724331][ T6599] loop3: detected capacity change from 0 to 40427 [ 222.788811][ T6599] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 222.863873][ T6604] loop0: detected capacity change from 0 to 256 [ 222.884449][ T6603] tipc: Started in network mode [ 222.958075][ T6603] tipc: Node identity 968e7e4d40af, cluster identity 4711 [ 222.976207][ T6603] tipc: Enabled bearer , priority 0 [ 223.020711][ T6604] exfat: Deprecated parameter 'utf8' [ 223.026094][ T6604] exfat: Unknown parameter 'zero_size_dir' [ 223.082679][ T6608] device syzkaller0 entered promiscuous mode [ 224.071885][ T6614] loop3: detected capacity change from 0 to 40427 [ 224.084306][ T6327] tipc: Node number set to 3592519245 [ 224.126287][ T6600] tipc: Resetting bearer [ 224.167023][ T6614] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 224.214724][ T6600] tipc: Disabling bearer [ 224.276450][ T6617] loop1: detected capacity change from 0 to 2048 [ 224.384709][ T6617] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.447384][ T6621] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.473477][ T6617] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 224.540465][ T6617] Remounting filesystem read-only [ 224.556095][ T6617] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 224.573864][ T6617] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 224.589979][ T26] audit: type=1800 audit(1762523377.531:8): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.470" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 224.860004][ T4259] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.358497][ T4259] usb 1-1: Using ep0 maxpacket: 32 [ 225.480143][ T4259] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 225.509923][ T4259] usb 1-1: config 0 has no interface number 0 [ 225.516098][ T4259] usb 1-1: config 0 interface 12 has no altsetting 0 [ 225.730203][ T4259] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 225.781066][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.789216][ T4259] usb 1-1: Product: syz [ 225.818249][ T4259] usb 1-1: Manufacturer: syz [ 225.832082][ T4259] usb 1-1: SerialNumber: syz [ 225.865306][ T4259] usb 1-1: config 0 descriptor?? [ 226.133317][ T6642] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 226.973545][ T6648] crypto_alloc_aead failed rc=-2 [ 228.131459][ T6669] tipc: Enabled bearer , priority 0 [ 228.245835][ T6671] device syzkaller0 entered promiscuous mode [ 228.724818][ T6673] tipc: Resetting bearer [ 228.817898][ T6673] tipc: Disabling bearer [ 228.870585][ T6668] loop5: detected capacity change from 0 to 8192 [ 228.886460][ T6678] tipc: Started in network mode [ 228.894914][ T6678] tipc: Node identity 8ae625bee497, cluster identity 4711 [ 228.953894][ T6668] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.985037][ T6678] tipc: Enabled bearer , priority 0 [ 229.042168][ T6682] tipc: Resetting bearer [ 229.091333][ T6681] device syzkaller0 entered promiscuous mode [ 229.097701][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 229.109213][ T6675] tipc: Resetting bearer [ 229.148939][ T6675] tipc: Disabling bearer [ 230.060403][ T6697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.067621][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 230.101269][ T4259] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 230.127119][ T4259] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 230.171494][ T4259] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 230.220846][ T6697] Zero length message leads to an empty skb [ 230.385246][ T4259] f81534: probe of 1-1:0.12 failed with error -71 [ 230.399477][ T4259] usb 1-1: USB disconnect, device number 5 [ 230.542631][ T6710] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 231.376954][ T6720] crypto_alloc_aead failed rc=-2 [ 232.313905][ T6733] loop3: detected capacity change from 0 to 4096 [ 232.390629][ T6733] ntfs3: Unknown parameter 'hide_dot_files' [ 232.680415][ T6735] tipc: Enabled bearer , priority 0 [ 232.727123][ T6735] device syzkaller0 entered promiscuous mode [ 232.753462][ T6735] tipc: Resetting bearer [ 232.786549][ T6734] tipc: Resetting bearer [ 232.843121][ T6741] loop0: detected capacity change from 0 to 256 [ 232.867977][ T6734] tipc: Disabling bearer [ 232.944563][ T6741] FAT-fs (loop0): Directory bread(block 64) failed [ 232.994084][ T6741] FAT-fs (loop0): Directory bread(block 65) failed [ 233.023059][ T6741] FAT-fs (loop0): Directory bread(block 66) failed [ 233.139956][ T6741] FAT-fs (loop0): Directory bread(block 67) failed [ 233.190929][ T6746] loop1: detected capacity change from 0 to 4096 [ 233.197722][ T6741] FAT-fs (loop0): Directory bread(block 68) failed [ 233.234491][ T6741] FAT-fs (loop0): Directory bread(block 69) failed [ 233.633554][ T6741] FAT-fs (loop0): Directory bread(block 70) failed [ 233.680256][ T6741] FAT-fs (loop0): Directory bread(block 71) failed [ 233.714180][ T6756] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.808429][ T6741] FAT-fs (loop0): Directory bread(block 72) failed [ 233.860835][ T6741] FAT-fs (loop0): Directory bread(block 73) failed [ 233.989794][ T6761] loop2: detected capacity change from 0 to 1024 [ 234.604523][ T6769] loop0: detected capacity change from 0 to 40427 [ 234.691964][ T6775] tipc: Enabled bearer , priority 0 [ 234.712584][ T6775] device syzkaller0 entered promiscuous mode [ 234.721112][ T6769] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 234.763746][ T6775] tipc: Resetting bearer [ 234.776606][ T6774] tipc: Resetting bearer [ 234.805921][ T6774] tipc: Disabling bearer [ 235.639964][ T6194] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 235.922553][ T6788] crypto_alloc_aead failed rc=-2 [ 236.287173][ T6804] loop0: detected capacity change from 0 to 2048 [ 236.410169][ T6194] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.445288][ T6804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.450446][ T6194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.481652][ T26] audit: type=1800 audit(1762523389.431:9): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.516" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 236.529915][ T6194] usb 3-1: Product: syz [ 236.595336][ T6194] usb 3-1: Manufacturer: syz [ 236.619750][ T6194] usb 3-1: SerialNumber: syz [ 236.671557][ T6194] usb 3-1: config 0 descriptor?? [ 237.393837][ T6194] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.421250][ T6820] loop5: detected capacity change from 0 to 8 [ 237.452116][ T6823] loop1: detected capacity change from 0 to 128 [ 237.461447][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 237.520264][ T6820] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 237.581494][ T5565] udevd[5565]: incorrect cramfs checksum on /dev/loop5 [ 237.644270][ T6823] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 237.670852][ T6828] tipc: Started in network mode [ 237.675892][ T6828] tipc: Node identity 000000002e2f66698, cluster identity 4711 [ 237.694234][ T6823] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.699017][ T6824] loop3: detected capacity change from 0 to 32768 [ 237.730671][ T6823] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 237.738516][ T6823] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 237.816025][ T6824] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 237.826315][ T6824] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 237.833103][ T6833] tipc: Enabled bearer , priority 0 [ 237.842692][ T6824] BTRFS info (device loop3): use zstd compression, level 3 [ 237.849996][ T6824] BTRFS info (device loop3): using free space tree [ 237.856552][ T6824] BTRFS info (device loop3): has skinny extents [ 237.867172][ T6833] device syzkaller0 entered promiscuous mode [ 237.899227][ T6833] tipc: Resetting bearer [ 237.921642][ T6832] tipc: Resetting bearer [ 238.010588][ T6832] tipc: Disabling bearer [ 238.118658][ T6824] BTRFS info (device loop3): enabling ssd optimizations [ 238.794827][ T6194] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 238.820107][ T6194] usb 3-1: USB disconnect, device number 6 [ 239.039738][ T6863] crypto_alloc_aead failed rc=-2 [ 239.946489][ T6878] loop2: detected capacity change from 0 to 65536 [ 240.338502][ T6878] XFS (loop2): Mounting V5 Filesystem [ 240.431017][ T6878] XFS (loop2): Ending clean mount [ 240.444333][ T6878] XFS (loop2): Quotacheck needed: Please wait. [ 240.540239][ T6878] XFS (loop2): Quotacheck: Done. [ 240.631517][ T4192] XFS (loop2): Unmounting Filesystem [ 241.244158][ T6909] tipc: Enabled bearer , priority 0 [ 241.288453][ T6909] tipc: Resetting bearer [ 241.355680][ T6908] tipc: Disabling bearer [ 241.991622][ T6916] loop3: detected capacity change from 0 to 40427 [ 242.144232][ T6916] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 243.445298][ T6934] loop0: detected capacity change from 0 to 65536 [ 243.542404][ T6936] crypto_alloc_aead failed rc=-2 [ 243.716704][ T6934] XFS (loop0): Mounting V5 Filesystem [ 243.958645][ T6934] XFS (loop0): Ending clean mount [ 244.039781][ T4187] XFS (loop0): Unmounting Filesystem [ 244.241757][ T6964] tipc: Enabled bearer , priority 0 [ 244.275876][ T6964] device syzkaller0 entered promiscuous mode [ 244.296863][ T6964] tipc: Resetting bearer [ 244.334532][ T6963] tipc: Resetting bearer [ 244.351031][ T6963] tipc: Disabling bearer [ 244.598748][ T6968] loop1: detected capacity change from 0 to 2048 [ 244.651246][ T6968] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 244.678271][ T6968] UDF-fs: Scanning with blocksize 512 failed [ 244.737981][ T6968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.015275][ T4304] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 246.163431][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 246.354556][ T7003] tipc: Enabled bearer , priority 0 [ 246.367755][ T7003] device syzkaller0 entered promiscuous mode [ 246.387896][ T7003] tipc: Resetting bearer [ 246.419016][ T7001] tipc: Resetting bearer [ 246.419933][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 246.467271][ T7001] tipc: Disabling bearer [ 246.570324][ T21] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 246.600664][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.630433][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.649970][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.679967][ T21] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 246.721352][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.809748][ T21] usb 2-1: config 0 descriptor?? [ 246.921998][ T21] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 246.990092][ T3547] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.080408][ T5565] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.111394][ T6193] usb 2-1: USB disconnect, device number 5 [ 247.149622][ T3547] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 247.522256][ T7017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 247.557474][ T7017] overlayfs: failed to set xattr on upper [ 247.561175][ T7015] loop5: detected capacity change from 0 to 32768 [ 247.584250][ T7017] overlayfs: ...falling back to index=off,metacopy=off. [ 247.730891][ T7015] ------------[ cut here ]------------ [ 247.736969][ T7015] WARNING: CPU: 0 PID: 7015 at fs/jfs/jfs_dmap.c:2943 dbAdjTree+0x448/0x4d0 [ 247.745810][ T7015] Modules linked in: [ 247.750291][ T7015] CPU: 0 PID: 7015 Comm: syz.5.568 Not tainted syzkaller #0 [ 247.757644][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.767943][ T7015] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 247.773153][ T7015] Code: e8 ed 17 f2 fe e9 5a ff ff ff e8 f3 af ad fe eb 05 e8 ec af ad fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d8 af ad fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 247.792894][ T7015] RSP: 0018:ffffc90004526ec0 EFLAGS: 00010283 [ 247.799093][ T7015] RAX: ffffffff82ca1c38 RBX: ffff88807bd18010 RCX: 0000000000080000 [ 247.807143][ T7015] RDX: ffffc9001498d000 RSI: 000000000002fe96 RDI: 000000000002fe97 [ 247.815203][ T7015] RBP: 0000000000002057 R08: 0000000000000000 R09: fffff940003de8c1 [ 247.823267][ T7015] R10: fffff940003de8c1 R11: 1ffffd40003de8c0 R12: ffff88807bd18018 [ 247.831386][ T7015] R13: dffffc0000000000 R14: 0000000000000005 R15: 0000000000000155 [ 247.839408][ T7015] FS: 00007f975712b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 247.848421][ T7015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.855104][ T7015] CR2: 0000000000000000 CR3: 0000000059f2a000 CR4: 00000000003506f0 [ 247.863271][ T7015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.871335][ T7015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.879357][ T7015] Call Trace: [ 247.882718][ T7015] [ 247.885702][ T7015] dbSplit+0x132/0x200 [ 247.889863][ T7015] dbAllocBits+0x505/0xa30 [ 247.894346][ T7015] dbAllocDmap+0x6b/0x140 [ 247.898885][ T7015] dbAlloc+0x464/0xb90 [ 247.903067][ T7015] extAlloc+0x4d2/0xf30 [ 247.907290][ T7015] ? jfs_ioc_trim+0x680/0x680 [ 247.912063][ T7015] ? memset+0x1e/0x40 [ 247.916090][ T7015] ? lockdep_init_map_type+0x9d/0x850 [ 247.921565][ T7015] jfs_get_block+0x343/0xab0 [ 247.926223][ T7015] ? jfs_dirty_inode+0x240/0x240 [ 247.931267][ T7015] ? alloc_buffer_head+0xd4/0x100 [ 247.936355][ T7015] nobh_write_begin+0x3d5/0xe80 [ 247.941319][ T7015] jfs_write_begin+0x3d/0x80 [ 247.945951][ T7015] ? jfs_dirty_inode+0x240/0x240 [ 247.951064][ T7015] generic_perform_write+0x2aa/0x530 [ 247.956415][ T7015] ? grab_cache_page_write_begin+0xa0/0xa0 [ 247.962304][ T7015] ? file_remove_privs+0x590/0x590 [ 247.967511][ T7015] ? read_lock_is_recursive+0x10/0x10 [ 247.972971][ T7015] ? preempt_count_add+0x8d/0x190 [ 247.978042][ T7015] ? rwsem_write_trylock+0x12f/0x1b0 [ 247.983403][ T7015] ? clear_nonspinnable+0x60/0x60 [ 247.988482][ T7015] __generic_file_write_iter+0x25f/0x4e0 [ 247.994202][ T7015] generic_file_write_iter+0xa6/0x1b0 [ 247.999609][ T7015] do_iter_readv_writev+0x497/0x600 [ 248.004883][ T7015] ? generic_file_rw_checks+0x280/0x280 [ 248.010503][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.015586][ T7015] ? fsnotify_perm+0x5d/0x560 [ 248.020411][ T7015] ? security_file_permission+0x75/0xa0 [ 248.025999][ T7015] do_iter_write+0x205/0x7b0 [ 248.030752][ T7015] ? memset+0x1e/0x40 [ 248.034769][ T7015] ? iov_iter_bvec+0xb4/0x170 [ 248.039657][ T7015] iter_file_splice_write+0x665/0xc50 [ 248.045230][ T7015] ? splice_from_pipe+0x150/0x150 [ 248.050319][ T7015] ? generic_file_splice_read+0x43f/0x590 [ 248.056079][ T7015] ? splice_shrink_spd+0xc0/0xc0 [ 248.061090][ T7015] ? splice_from_pipe+0x150/0x150 [ 248.066151][ T7015] direct_splice_actor+0xe1/0x130 [ 248.071253][ T7015] splice_direct_to_actor+0x4de/0xbd0 [ 248.076754][ T7015] ? direct_file_splice_eof+0xa0/0xa0 [ 248.082187][ T7015] ? pipe_to_sendpage+0x310/0x310 [ 248.087330][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.092521][ T7015] ? fsnotify_perm+0x5d/0x560 [ 248.097230][ T7015] ? security_file_permission+0x75/0xa0 [ 248.102839][ T7015] do_splice_direct+0x1b6/0x2c0 [ 248.107734][ T7015] ? splice_direct_to_actor+0xbd0/0xbd0 [ 248.113350][ T7015] ? rcu_read_lock_any_held+0xb0/0x120 [ 248.118851][ T7015] ? do_splice_direct+0x2c0/0x2c0 [ 248.123957][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.129133][ T7015] do_sendfile+0x5d5/0xec0 [ 248.133650][ T7015] ? do_pwritev+0x340/0x340 [ 248.138188][ T7015] ? __lock_acquire+0x7c60/0x7c60 [ 248.143295][ T7015] __se_sys_sendfile64+0x13b/0x190 [ 248.148450][ T7015] ? lock_chain_count+0x20/0x20 [ 248.153401][ T7015] ? __x64_sys_sendfile64+0xa0/0xa0 [ 248.158637][ T7015] ? lockdep_hardirqs_on+0x94/0x140 [ 248.163937][ T7015] do_syscall_64+0x4c/0xa0 [ 248.168395][ T7015] ? clear_bhb_loop+0x30/0x80 [ 248.173157][ T7015] ? clear_bhb_loop+0x30/0x80 [ 248.177887][ T7015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.183871][ T7015] RIP: 0033:0x7f9758ec46c9 [ 248.188320][ T7015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.208003][ T7015] RSP: 002b:00007f975712b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 248.216604][ T7015] RAX: ffffffffffffffda RBX: 00007f975911afa0 RCX: 00007f9758ec46c9 [ 248.224651][ T7015] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 248.232694][ T7015] RBP: 00007f9758f46f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.240735][ T7015] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 248.248742][ T7015] R13: 00007f975911b038 R14: 00007f975911afa0 R15: 00007fff5c975578 [ 248.256812][ T7015] [ 248.259904][ T7015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.267208][ T7015] CPU: 0 PID: 7015 Comm: syz.5.568 Not tainted syzkaller #0 [ 248.274524][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.284605][ T7015] Call Trace: [ 248.287903][ T7015] [ 248.290857][ T7015] dump_stack_lvl+0x168/0x230 [ 248.295566][ T7015] ? show_regs_print_info+0x20/0x20 [ 248.300790][ T7015] ? load_image+0x3b0/0x3b0 [ 248.305335][ T7015] panic+0x2c9/0x7f0 [ 248.309260][ T7015] ? bpf_jit_dump+0xd0/0xd0 [ 248.313803][ T7015] ? dbAdjTree+0x448/0x4d0 [ 248.318332][ T7015] __warn+0x248/0x2b0 [ 248.322339][ T7015] ? dbAdjTree+0x448/0x4d0 [ 248.326783][ T7015] report_bug+0x1b7/0x2e0 [ 248.331150][ T7015] handle_bug+0x3a/0x70 [ 248.335326][ T7015] exc_invalid_op+0x16/0x40 [ 248.339847][ T7015] asm_exc_invalid_op+0x16/0x20 [ 248.344721][ T7015] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 248.349785][ T7015] Code: e8 ed 17 f2 fe e9 5a ff ff ff e8 f3 af ad fe eb 05 e8 ec af ad fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d8 af ad fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 248.369421][ T7015] RSP: 0018:ffffc90004526ec0 EFLAGS: 00010283 [ 248.375525][ T7015] RAX: ffffffff82ca1c38 RBX: ffff88807bd18010 RCX: 0000000000080000 [ 248.383522][ T7015] RDX: ffffc9001498d000 RSI: 000000000002fe96 RDI: 000000000002fe97 [ 248.391526][ T7015] RBP: 0000000000002057 R08: 0000000000000000 R09: fffff940003de8c1 [ 248.399519][ T7015] R10: fffff940003de8c1 R11: 1ffffd40003de8c0 R12: ffff88807bd18018 [ 248.407521][ T7015] R13: dffffc0000000000 R14: 0000000000000005 R15: 0000000000000155 [ 248.415523][ T7015] ? dbAdjTree+0x448/0x4d0 [ 248.419988][ T7015] dbSplit+0x132/0x200 [ 248.424086][ T7015] dbAllocBits+0x505/0xa30 [ 248.428558][ T7015] dbAllocDmap+0x6b/0x140 [ 248.433072][ T7015] dbAlloc+0x464/0xb90 [ 248.437194][ T7015] extAlloc+0x4d2/0xf30 [ 248.441398][ T7015] ? jfs_ioc_trim+0x680/0x680 [ 248.446119][ T7015] ? memset+0x1e/0x40 [ 248.450137][ T7015] ? lockdep_init_map_type+0x9d/0x850 [ 248.455552][ T7015] jfs_get_block+0x343/0xab0 [ 248.460182][ T7015] ? jfs_dirty_inode+0x240/0x240 [ 248.465236][ T7015] ? alloc_buffer_head+0xd4/0x100 [ 248.470303][ T7015] nobh_write_begin+0x3d5/0xe80 [ 248.475199][ T7015] jfs_write_begin+0x3d/0x80 [ 248.479815][ T7015] ? jfs_dirty_inode+0x240/0x240 [ 248.484953][ T7015] generic_perform_write+0x2aa/0x530 [ 248.490288][ T7015] ? grab_cache_page_write_begin+0xa0/0xa0 [ 248.496117][ T7015] ? file_remove_privs+0x590/0x590 [ 248.501256][ T7015] ? read_lock_is_recursive+0x10/0x10 [ 248.506653][ T7015] ? preempt_count_add+0x8d/0x190 [ 248.511702][ T7015] ? rwsem_write_trylock+0x12f/0x1b0 [ 248.517020][ T7015] ? clear_nonspinnable+0x60/0x60 [ 248.522088][ T7015] __generic_file_write_iter+0x25f/0x4e0 [ 248.527772][ T7015] generic_file_write_iter+0xa6/0x1b0 [ 248.533373][ T7015] do_iter_readv_writev+0x497/0x600 [ 248.538617][ T7015] ? generic_file_rw_checks+0x280/0x280 [ 248.544197][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.549248][ T7015] ? fsnotify_perm+0x5d/0x560 [ 248.553945][ T7015] ? security_file_permission+0x75/0xa0 [ 248.559519][ T7015] do_iter_write+0x205/0x7b0 [ 248.564226][ T7015] ? memset+0x1e/0x40 [ 248.568238][ T7015] ? iov_iter_bvec+0xb4/0x170 [ 248.572944][ T7015] iter_file_splice_write+0x665/0xc50 [ 248.578388][ T7015] ? splice_from_pipe+0x150/0x150 [ 248.583453][ T7015] ? generic_file_splice_read+0x43f/0x590 [ 248.589206][ T7015] ? splice_shrink_spd+0xc0/0xc0 [ 248.594268][ T7015] ? splice_from_pipe+0x150/0x150 [ 248.599313][ T7015] direct_splice_actor+0xe1/0x130 [ 248.604366][ T7015] splice_direct_to_actor+0x4de/0xbd0 [ 248.609814][ T7015] ? direct_file_splice_eof+0xa0/0xa0 [ 248.615221][ T7015] ? pipe_to_sendpage+0x310/0x310 [ 248.620265][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.625323][ T7015] ? fsnotify_perm+0x5d/0x560 [ 248.630027][ T7015] ? security_file_permission+0x75/0xa0 [ 248.635623][ T7015] do_splice_direct+0x1b6/0x2c0 [ 248.640533][ T7015] ? splice_direct_to_actor+0xbd0/0xbd0 [ 248.646121][ T7015] ? rcu_read_lock_any_held+0xb0/0x120 [ 248.651617][ T7015] ? do_splice_direct+0x2c0/0x2c0 [ 248.656670][ T7015] ? common_file_perm+0x171/0x1c0 [ 248.661733][ T7015] do_sendfile+0x5d5/0xec0 [ 248.666199][ T7015] ? do_pwritev+0x340/0x340 [ 248.670731][ T7015] ? __lock_acquire+0x7c60/0x7c60 [ 248.675796][ T7015] __se_sys_sendfile64+0x13b/0x190 [ 248.680937][ T7015] ? lock_chain_count+0x20/0x20 [ 248.685819][ T7015] ? __x64_sys_sendfile64+0xa0/0xa0 [ 248.691051][ T7015] ? lockdep_hardirqs_on+0x94/0x140 [ 248.696377][ T7015] do_syscall_64+0x4c/0xa0 [ 248.700820][ T7015] ? clear_bhb_loop+0x30/0x80 [ 248.705722][ T7015] ? clear_bhb_loop+0x30/0x80 [ 248.710439][ T7015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.716490][ T7015] RIP: 0033:0x7f9758ec46c9 [ 248.720940][ T7015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.740665][ T7015] RSP: 002b:00007f975712b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 248.749118][ T7015] RAX: ffffffffffffffda RBX: 00007f975911afa0 RCX: 00007f9758ec46c9 [ 248.757116][ T7015] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 248.765427][ T7015] RBP: 00007f9758f46f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.773525][ T7015] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 248.781606][ T7015] R13: 00007f975911b038 R14: 00007f975911afa0 R15: 00007fff5c975578 [ 248.789621][ T7015] [ 248.792963][ T7015] Kernel Offset: disabled [ 248.797574][ T7015] Rebooting in 86400 seconds..