last executing test programs: 41.150811199s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setrlimit(0x9, &(0x7f0000000180)={0xfff, 0xa76}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) waitid(0x2, r1, 0x0, 0x8, 0x0) pipe2(&(0x7f00000004c0), 0x800) 33.647727441s ago: executing program 0 (id=204): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) 28.324097821s ago: executing program 3 (id=209): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) 28.260290403s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 26.684534371s ago: executing program 0 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setrlimit(0x9, &(0x7f0000000180)={0xfff, 0xa76}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) waitid(0x2, r1, 0x0, 0x8, 0x0) pipe2(&(0x7f00000004c0), 0x800) 22.296467018s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 21.736677031s ago: executing program 3 (id=218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x40000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 20.240973198s ago: executing program 3 (id=219): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) 18.48496619s ago: executing program 2 (id=220): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000280), 0x0, 0x2000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0x6, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 17.662261971s ago: executing program 0 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 15.2407468s ago: executing program 1 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = fcntl$dupfd(r3, 0x0, r4) write$FUSE_NOTIFY_STORE(r6, 0x0, 0xc388) 15.195721671s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) 13.640473729s ago: executing program 1 (id=225): syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x20482) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4adaf6b3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x33) r2 = getpid() openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) 13.304490947s ago: executing program 3 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11.609612018s ago: executing program 3 (id=227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x40000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 11.490603751s ago: executing program 2 (id=228): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) 11.168505979s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setrlimit(0x9, &(0x7f0000000180)={0xfff, 0xa76}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) waitid(0x2, r1, 0x0, 0x8, 0x0) pipe2(&(0x7f00000004c0), 0x800) 9.89084018s ago: executing program 2 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 9.175762087s ago: executing program 1 (id=231): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x40c48, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={r0, 0x1, 0x7, 0x3}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xa, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x800, 0x5a, 0x2, 0xfffffffffffffe90, 0x7, 0x3, 0x980, 0x5}, {0x1, 0x3, 0x5, 0x1}, 0x9, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x8, 0x80, 0x5, 0x5}}, 0xe8) 8.058836354s ago: executing program 1 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 6.484218313s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = fcntl$dupfd(r3, 0x0, r4) write$FUSE_NOTIFY_STORE(r6, 0x0, 0xc388) 4.643548018s ago: executing program 2 (id=234): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x40c48, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3.350804379s ago: executing program 1 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.820794136s ago: executing program 3 (id=236): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000280), 0x0, 0x2000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0x6, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 0s ago: executing program 32 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 75.762059][ T5764] cgroup: Unknown subsys name 'net' [ 75.926162][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.632743][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.169560][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.178828][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.186878][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.191733][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.195079][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.209649][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.214514][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.217100][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.225728][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.233233][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.239403][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.246395][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.268436][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.281245][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.285557][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.289300][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.296179][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.310730][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.333713][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.353974][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.362717][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.373217][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.399073][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.406932][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.810253][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 79.835750][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.855097][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.976532][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 80.056145][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.064075][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.071546][ T5778] bridge_slave_0: entered allmulticast mode [ 80.078741][ T5778] bridge_slave_0: entered promiscuous mode [ 80.095455][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.105096][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.112546][ T5775] bridge_slave_0: entered allmulticast mode [ 80.120709][ T5775] bridge_slave_0: entered promiscuous mode [ 80.141330][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.148600][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.155738][ T5778] bridge_slave_1: entered allmulticast mode [ 80.163100][ T5778] bridge_slave_1: entered promiscuous mode [ 80.183057][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.190419][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.197601][ T5782] bridge_slave_0: entered allmulticast mode [ 80.204820][ T5782] bridge_slave_0: entered promiscuous mode [ 80.213101][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.222801][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.230348][ T5775] bridge_slave_1: entered allmulticast mode [ 80.237167][ T5775] bridge_slave_1: entered promiscuous mode [ 80.279447][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.286681][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.296883][ T5782] bridge_slave_1: entered allmulticast mode [ 80.304685][ T5782] bridge_slave_1: entered promiscuous mode [ 80.335118][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.359904][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.384116][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.404247][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.425212][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.475147][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.487245][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.494894][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.502328][ T5781] bridge_slave_0: entered allmulticast mode [ 80.510218][ T5781] bridge_slave_0: entered promiscuous mode [ 80.520451][ T5775] team0: Port device team_slave_0 added [ 80.526664][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.533951][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.541278][ T5781] bridge_slave_1: entered allmulticast mode [ 80.548131][ T5781] bridge_slave_1: entered promiscuous mode [ 80.558638][ T5778] team0: Port device team_slave_0 added [ 80.576439][ T5775] team0: Port device team_slave_1 added [ 80.594070][ T5778] team0: Port device team_slave_1 added [ 80.644914][ T5782] team0: Port device team_slave_0 added [ 80.664123][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.671181][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.697478][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.714337][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.737582][ T5782] team0: Port device team_slave_1 added [ 80.744523][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.751650][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.777626][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.798230][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.818221][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.825218][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.851495][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.873292][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.880349][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.906606][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.943290][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.950436][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.985421][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.022947][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.030128][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.056163][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.090050][ T5781] team0: Port device team_slave_0 added [ 81.105373][ T5775] hsr_slave_0: entered promiscuous mode [ 81.112203][ T5775] hsr_slave_1: entered promiscuous mode [ 81.136254][ T5781] team0: Port device team_slave_1 added [ 81.168720][ T5778] hsr_slave_0: entered promiscuous mode [ 81.175214][ T5778] hsr_slave_1: entered promiscuous mode [ 81.181656][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.189992][ T5778] Cannot create hsr debugfs directory [ 81.223964][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.231191][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.257613][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.270788][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.277765][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.304255][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.328575][ T5782] hsr_slave_0: entered promiscuous mode [ 81.334942][ T5782] hsr_slave_1: entered promiscuous mode [ 81.341245][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.348888][ T5782] Cannot create hsr debugfs directory [ 81.369189][ T5779] Bluetooth: hci2: command tx timeout [ 81.369205][ T5787] Bluetooth: hci0: command tx timeout [ 81.380616][ T5088] Bluetooth: hci1: command tx timeout [ 81.435600][ T5781] hsr_slave_0: entered promiscuous mode [ 81.442207][ T5781] hsr_slave_1: entered promiscuous mode [ 81.448240][ T5779] Bluetooth: hci3: command tx timeout [ 81.454497][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.463328][ T5781] Cannot create hsr debugfs directory [ 81.829014][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.843778][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.855904][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.874694][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.943449][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.954711][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.967606][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.981954][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.086270][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.097411][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.122544][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.154174][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.195662][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.216343][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.239794][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.250793][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.345508][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.407186][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.443284][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.450583][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.469570][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.484736][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.491917][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.516456][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.539100][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.569878][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.587810][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.595083][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.622526][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.629968][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.641400][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.654462][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.681365][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.688551][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.699565][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.706684][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.732882][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.740062][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.777566][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.784754][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.305576][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.375420][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.444297][ T5775] veth0_vlan: entered promiscuous mode [ 83.451179][ T5779] Bluetooth: hci0: command tx timeout [ 83.456909][ T5779] Bluetooth: hci2: command tx timeout [ 83.464250][ T5088] Bluetooth: hci1: command tx timeout [ 83.496800][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.528336][ T5779] Bluetooth: hci3: command tx timeout [ 83.540213][ T5775] veth1_vlan: entered promiscuous mode [ 83.572562][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.612370][ T5775] veth0_macvtap: entered promiscuous mode [ 83.646818][ T5775] veth1_macvtap: entered promiscuous mode [ 83.681600][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.697485][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.720775][ T5781] veth0_vlan: entered promiscuous mode [ 83.734506][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.744593][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.755441][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.764631][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.808660][ T5782] veth0_vlan: entered promiscuous mode [ 83.862674][ T5778] veth0_vlan: entered promiscuous mode [ 83.877132][ T5782] veth1_vlan: entered promiscuous mode [ 83.891881][ T5781] veth1_vlan: entered promiscuous mode [ 83.912263][ T5778] veth1_vlan: entered promiscuous mode [ 83.981399][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.012084][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.035459][ T5782] veth0_macvtap: entered promiscuous mode [ 84.066735][ T5781] veth0_macvtap: entered promiscuous mode [ 84.076350][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.098892][ T5778] veth0_macvtap: entered promiscuous mode [ 84.105746][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.107032][ T5782] veth1_macvtap: entered promiscuous mode [ 84.127600][ T5781] veth1_macvtap: entered promiscuous mode [ 84.142419][ T5778] veth1_macvtap: entered promiscuous mode [ 84.211688][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.223999][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.237588][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.251808][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.263752][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.277943][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.294545][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.316823][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.338937][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.361071][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.371823][ T5834] syz.3.4[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.390701][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.392970][ T5834] loop3: detected capacity change from 0 to 256 [ 84.403527][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.439037][ T5834] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 84.442818][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.453201][ T5834] exFAT-fs (loop3): failed to load alloc-bitmap [ 84.468402][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.479885][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.483214][ T5834] exFAT-fs (loop3): failed to recognize exfat type [ 84.493870][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.542001][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.578376][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.598929][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.617673][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.630146][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.641220][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.654980][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.667455][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.677937][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.687498][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708279][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.770035][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.782120][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.795710][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.806618][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.819806][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.830778][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.850484][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.869739][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.886594][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.909879][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.926868][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.035700][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046518][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.055977][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.064929][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562310][ T5779] Bluetooth: hci2: command tx timeout [ 85.567859][ T5787] Bluetooth: hci1: command tx timeout [ 85.574172][ T5088] Bluetooth: hci0: command tx timeout [ 85.615261][ T5088] Bluetooth: hci3: command tx timeout [ 85.833882][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.854413][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.966292][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.986848][ T48] device offline error, dev sda, sector 520502 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 86.003377][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.012724][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2017 starting block 65062) [ 86.039069][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.050301][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.079759][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2017, error -5) [ 86.080944][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2018 starting block 65063) [ 86.098264][ T11] Buffer I/O error on device sda1, logical block 65024 [ 86.135609][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2019 starting block 65064) [ 86.150660][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2018, error -5) [ 86.152226][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.173868][ T48] device offline error, dev sda, sector 695494 op 0x1:(WRITE) flags 0x4000 phys_seg 34 prio class 2 [ 86.186278][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.194570][ T48] device offline error, dev sda, sector 696000 op 0x1:(WRITE) flags 0x4000 phys_seg 62 prio class 2 [ 86.206595][ T48] device offline error, dev sda, sector 696512 op 0x1:(WRITE) flags 0x4000 phys_seg 35 prio class 2 [ 86.221122][ T11] Buffer I/O error on device sda1, logical block 65025 [ 86.248828][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 86.262641][ T11] Buffer I/O error on device sda1, logical block 65026 [ 86.273603][ T48] device offline error, dev sda, sector 697024 op 0x1:(WRITE) flags 0x4000 phys_seg 31 prio class 2 [ 86.292365][ T48] device offline error, dev sda, sector 697536 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 2 [ 86.306340][ T48] device offline error, dev sda, sector 698048 op 0x1:(WRITE) flags 0x4000 phys_seg 30 prio class 2 [ 86.329619][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.339095][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.354711][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.366483][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.374177][ T48] device offline error, dev sda, sector 698560 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 86.459845][ T48] device offline error, dev sda, sector 699072 op 0x1:(WRITE) flags 0x0 phys_seg 23 prio class 2 [ 86.505686][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2021 starting block 87384) [ 86.662787][ T5854] binder: 5851:5854 unknown command 0 [ 86.668486][ T5854] binder: 5851:5854 ioctl c0306201 200000000180 returned -22 [ 86.885111][ T48] device offline error, dev sda, sector 699294 op 0x1:(WRITE) flags 0x4000 phys_seg 15 prio class 2 [ 87.192090][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2021 starting block 88051) [ 87.278784][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88102) [ 87.309651][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 87.375645][ T11] Buffer I/O error on device sda1, logical block 87373 [ 87.381264][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88234) [ 87.411566][ T11] Buffer I/O error on device sda1, logical block 87374 [ 87.422524][ T5857] loop0: detected capacity change from 0 to 128 [ 87.428925][ T11] Buffer I/O error on device sda1, logical block 87375 [ 87.431542][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88266) [ 87.437733][ T5858] Bluetooth: MGMT ver 1.22 [ 87.458170][ T11] Buffer I/O error on device sda1, logical block 87376 [ 87.468158][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88281) [ 87.494693][ T11] Buffer I/O error on device sda1, logical block 87377 [ 87.506664][ T11] Buffer I/O error on device sda1, logical block 87378 [ 87.512326][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88306) [ 87.518262][ T11] Buffer I/O error on device sda1, logical block 87379 [ 87.576151][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.609447][ T5088] Bluetooth: hci1: command tx timeout [ 87.609640][ T5857] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.615650][ T5779] Bluetooth: hci0: command tx timeout [ 87.651972][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.666988][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.689048][ T5088] Bluetooth: hci3: command tx timeout [ 87.694652][ T5779] Bluetooth: hci2: command tx timeout [ 87.704956][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.743009][ T5857] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.785055][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.800230][ T1136] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 87.851431][ T5847] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 87.878314][ T5104] Aborting journal on device sda1-8. [ 87.887848][ T5861] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.7: Detected aborted journal [ 87.899346][ T5847] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 87.908341][ T5847] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 87.917043][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 87.926785][ T5104] JBD2: I/O error when updating journal superblock for sda1-8. [ 87.942736][ T5847] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 87.964000][ T5847] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 87.973209][ T5847] Buffer I/O error on dev sda1, logical block 657, lost async page write [ 87.982107][ T5847] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 87.992231][ T5847] Buffer I/O error on dev sda1, logical block 4247, lost async page write [ 88.003070][ T5847] Buffer I/O error on dev sda1, logical block 4260, lost async page write [ 88.468069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 89.867562][ T5862] loop2: detected capacity change from 0 to 512 [ 89.892690][ T5864] loop1: detected capacity change from 0 to 128 [ 89.942483][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.956359][ T5862] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.7: corrupted in-inode xattr: invalid size in ea xattr [ 89.972235][ T5862] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.7: couldn't read orphan inode 15 (err -117) [ 89.986075][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.235974][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.757732][ T4495] kworker/u4:10: attempt to access beyond end of device [ 91.757732][ T4495] loop1: rw=1, sector=145, nr_sectors = 14 limit=128 [ 91.795303][ T5847] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 93.178539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.470188][ T23] cfg80211: failed to load regulatory.db [ 95.371589][ T5891] loop3: detected capacity change from 0 to 2048 [ 95.419399][ T5895] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.446759][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.516482][ T5889] loop2: detected capacity change from 0 to 512 [ 95.526432][ T5891] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.769335][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.331308][ T5909] TCP: TCP_TX_DELAY enabled [ 97.625758][ T5911] loop0: detected capacity change from 0 to 2048 [ 97.634279][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.679726][ T5911] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 98.298192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.989399][ T5911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.016471][ T9] usb 2-1: device descriptor read/all, error -71 [ 100.092042][ T5923] loop1: detected capacity change from 0 to 256 [ 100.110122][ T5923] ======================================================= [ 100.110122][ T5923] WARNING: The mand mount option has been deprecated and [ 100.110122][ T5923] and is ignored by this kernel. Remove the mand [ 100.110122][ T5923] option from the mount to silence this warning. [ 100.110122][ T5923] ======================================================= [ 100.188134][ T5923] exfat: Deprecated parameter 'utf8' [ 100.193537][ T5923] exfat: Deprecated parameter 'namecase' [ 100.228133][ T5923] exfat: Deprecated parameter 'utf8' [ 100.275371][ T5923] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 100.406120][ T5923] syz.1.26: attempt to access beyond end of device [ 100.406120][ T5923] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 100.452781][ T5923] syz.1.26: attempt to access beyond end of device [ 100.452781][ T5923] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 100.491588][ T28] audit: type=1800 audit(1786781968.001:2): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 100.520067][ T5923] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 102.412082][ T5926] loop1: detected capacity change from 0 to 2048 [ 102.446424][ T5926] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 102.514268][ T5926] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 103.828052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.183626][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 108.141620][ T5943] loop1: detected capacity change from 0 to 128 [ 108.161480][ T5941] loop3: detected capacity change from 0 to 1024 [ 108.170238][ T5943] FAT-fs (loop1): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 108.263372][ T5945] loop2: detected capacity change from 0 to 128 [ 108.291957][ T5945] FAT-fs (loop2): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 108.970175][ T5946] binder: 5942:5946 ioctl d000943e 200000001b00 returned -22 [ 109.900045][ T5768] blk_print_req_error: 70 callbacks suppressed [ 109.900062][ T5768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.957695][ T5941] hfsplus: xattr search failed [ 111.082457][ T5956] loop0: detected capacity change from 0 to 256 [ 111.185858][ T5956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 111.360232][ T5956] syz.0.34: attempt to access beyond end of device [ 111.360232][ T5956] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 111.544494][ T5956] syz.0.34: attempt to access beyond end of device [ 111.544494][ T5956] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.545638][ T28] audit: type=1800 audit(1786781979.061:3): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 112.120528][ T5956] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 112.590773][ T5956] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 112.678333][ T5956] exFAT-fs (loop0): Filesystem has been set read-only [ 112.685361][ T5956] exFAT-fs (loop0): error, failed to bmap (inode : ffff888057e094e0 iblock : 9, err : -5) [ 112.699764][ T5956] syz.0.34: attempt to access beyond end of device [ 112.699764][ T5956] loop0: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 112.741328][ T5962] syz.0.34: attempt to access beyond end of device [ 112.741328][ T5962] loop0: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 112.869341][ T5962] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 112.919364][ T5964] loop3: detected capacity change from 0 to 2048 [ 112.929570][ T5962] exFAT-fs (loop0): error, failed to bmap (inode : ffff888057e094e0 iblock : 9, err : -5) [ 112.974331][ T5964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.807924][ T5973] loop2: detected capacity change from 0 to 2048 [ 115.844557][ T5973] UDF-fs: bad mount option "volume=00000000000000002693" or missing value [ 116.218242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 116.459005][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.794024][ T5983] loop0: detected capacity change from 0 to 8 [ 116.807226][ T5985] loop3: detected capacity change from 0 to 128 [ 116.817253][ T5981] loop1: detected capacity change from 0 to 2048 [ 116.851732][ T5983] unable to read inode lookup table [ 116.853697][ T5985] FAT-fs (loop3): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 116.903726][ T5981] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 116.955699][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.959906][ T5769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.374359][ T5987] loop3: detected capacity change from 0 to 512 [ 118.381309][ T5987] EXT4-fs: Ignoring removed nobh option [ 118.386908][ T5987] EXT4-fs: Ignoring removed orlov option [ 118.414455][ T5981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.430498][ T5987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c018, mo2=0102] [ 118.438535][ T5987] System zones: 1-12 [ 118.459738][ T5987] EXT4-fs error (device loop3): __ext4_iget:5079: inode #11: block 1: comm syz.3.41: invalid block [ 118.778511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.998237][ T5987] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.41: couldn't read orphan inode 11 (err -117) [ 120.019900][ T5987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.672642][ T5998] loop1: detected capacity change from 0 to 128 [ 121.870135][ T6000] loop1: detected capacity change from 0 to 1024 [ 122.381011][ T6002] syz.1.46: attempt to access beyond end of device [ 122.381011][ T6002] loop1: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 122.394848][ T6002] buffer_io_error: 6 callbacks suppressed [ 122.394885][ T6002] Buffer I/O error on dev loop1, logical block 2889, lost async page write [ 123.151830][ T6004] loop1: detected capacity change from 0 to 256 [ 123.219220][ T6004] exfat: Deprecated parameter 'utf8' [ 124.308060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.758228][ T5991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 124.800285][ T28] audit: type=1326 audit(1786781992.321:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 124.843584][ T28] audit: type=1326 audit(1786781992.361:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 124.868781][ T28] audit: type=1326 audit(1786781992.361:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 124.873485][ T6004] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 124.893199][ T28] audit: type=1326 audit(1786781992.361:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 124.940754][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.956638][ T28] audit: type=1326 audit(1786781992.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 125.026698][ T28] audit: type=1326 audit(1786781992.451:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 125.093721][ T28] audit: type=1326 audit(1786781992.521:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 125.129033][ T28] audit: type=1326 audit(1786781992.521:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 125.213857][ T28] audit: type=1326 audit(1786781992.521:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 126.458160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 126.759239][ T28] audit: type=1326 audit(1786781992.521:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3edf9e0d9 code=0x7ffc0000 [ 128.289985][ T27] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 128.500833][ T27] usb 2-1: not running at top speed; connect to a high speed hub [ 128.523181][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 128.538568][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.556863][ T27] usb 2-1: Product: syz [ 128.566988][ T27] usb 2-1: Manufacturer: syz [ 128.577123][ T27] usb 2-1: SerialNumber: syz [ 128.630881][ T27] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 128.693941][ T27] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 128.747910][ T27] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.926186][ T27] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.995212][ T27] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 129.498880][ T2194] usb 2-1: USB disconnect, device number 4 [ 129.668722][ T2194] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 129.738170][ T2194] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 129.773515][ T2194] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 129.795707][ T2194] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 129.817873][ T2194] keyspan 2-1:1.0: device disconnected [ 131.342603][ T6033] loop3: detected capacity change from 0 to 128 [ 131.388409][ T6033] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 131.988068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 133.153411][ T6038] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.225369][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.293411][ T6041] loop2: detected capacity change from 0 to 2048 [ 134.398571][ T6041] UDF-fs: bad mount option "volume=00000000000000002693" or missing value [ 134.848123][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.307390][ T6044] loop3: detected capacity change from 0 to 2048 [ 135.409960][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.463464][ T6044] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.559999][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 135.560018][ T28] audit: type=1800 audit(1786782003.061:68): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 135.661012][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.108114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.574333][ T6055] loop1: detected capacity change from 0 to 512 [ 139.080005][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.107804][ T6055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.178554][ T6055] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 139.186531][ T6055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 139.210390][ T6055] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 139.248479][ T6055] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 139.293906][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.418905][ T6055] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.57: dx entry: limit 65535 != root limit 120 [ 139.478766][ T6055] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.57: Corrupt directory, running e2fsck is recommended [ 139.578796][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.763697][ T6066] loop1: detected capacity change from 0 to 1024 [ 139.846023][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.877920][ T6066] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.972400][ T28] audit: type=1800 audit(1786782007.491:69): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 140.009664][ T6066] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.64: lblock 0 mapped to illegal pblock 0 (length 1) [ 140.044543][ T28] audit: type=1800 audit(1786782007.491:70): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 140.093817][ T6066] EXT4-fs (loop1): Remounting filesystem read-only [ 140.131806][ T6072] loop3: detected capacity change from 0 to 164 [ 140.215244][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.218616][ T6072] rock: directory entry would overflow storage [ 140.278105][ T6072] rock: sig=0x66, size=4, remaining=3 [ 140.291575][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.383143][ T6072] rock: directory entry would overflow storage [ 140.400251][ T6072] rock: sig=0x66, size=4, remaining=3 [ 141.888653][ T6063] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 151.287156][ T6118] loop2: detected capacity change from 0 to 1024 [ 151.377864][ T6118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.483088][ T6118] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.885151][ T6121] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 152.930621][ T28] audit: type=1800 audit(1786782020.451:71): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.80" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 152.935896][ T6118] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.80: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.008168][ T6121] EXT4-fs (loop2): Remounting filesystem read-only [ 153.017889][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 153.068212][ T28] audit: type=1800 audit(1786782020.451:72): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.80" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 153.223024][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.351971][ T6211] loop0: detected capacity change from 0 to 164 [ 178.416501][ T6211] rock: directory entry would overflow storage [ 178.445157][ T6211] rock: sig=0x66, size=4, remaining=3 [ 178.487351][ T6211] rock: directory entry would overflow storage [ 178.517073][ T6211] rock: sig=0x66, size=4, remaining=3 [ 194.842561][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.848968][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.503039][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 204.503100][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 208.320596][ T6304] loop0: detected capacity change from 0 to 128 [ 214.581295][ T6324] loop2: detected capacity change from 0 to 128 [ 214.683694][ T6149] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.856114][ T6341] loop3: detected capacity change from 0 to 128 [ 219.044726][ T6149] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.896419][ T6379] loop3: detected capacity change from 0 to 128 [ 232.028076][ T6149] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.279114][ T6383] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.122958][ T6407] loop1: detected capacity change from 0 to 128 [ 244.109291][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 247.466936][ T6432] loop2: detected capacity change from 0 to 128 [ 247.546268][ T6149] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.576930][ T6442] loop2: detected capacity change from 0 to 164 [ 248.632237][ T6442] rock: directory entry would overflow storage [ 248.655064][ T6442] rock: sig=0x66, size=4, remaining=3 [ 248.671728][ T6442] rock: directory entry would overflow storage [ 248.682228][ T6442] rock: sig=0x66, size=4, remaining=3 [ 251.044965][ T6455] loop2: detected capacity change from 0 to 128 [ 256.092903][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.104777][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.996581][ T6480] loop3: detected capacity change from 0 to 128 [ 262.742052][ T6488] loop2: detected capacity change from 0 to 128 [ 262.895588][ T6149] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.377810][ T6501] loop1: detected capacity change from 0 to 164 [ 266.555322][ T6501] rock: directory entry would overflow storage [ 266.574764][ T6501] rock: sig=0x66, size=4, remaining=3 [ 266.591397][ T6500] rock: directory entry would overflow storage [ 266.597635][ T6500] rock: sig=0x66, size=4, remaining=3 [ 268.152445][ T6509] loop1: detected capacity change from 0 to 128 [ 268.358113][ T6149] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.599592][ T6543] loop2: detected capacity change from 0 to 164 [ 277.662889][ T6545] loop3: detected capacity change from 0 to 128 [ 277.669749][ T6543] rock: directory entry would overflow storage [ 277.706035][ T6543] rock: sig=0x66, size=4, remaining=3 [ 277.747428][ T6543] rock: directory entry would overflow storage [ 277.799168][ T6543] rock: sig=0x66, size=4, remaining=3 [ 278.610105][ T6549] loop3: detected capacity change from 0 to 128 [ 287.857615][ T6575] loop3: detected capacity change from 0 to 128 [ 287.960094][ T6546] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.333001][ T6592] loop1: detected capacity change from 0 to 164 [ 293.383498][ T6592] rock: directory entry would overflow storage [ 293.403245][ T6592] rock: sig=0x66, size=4, remaining=3 [ 293.448924][ T6592] rock: directory entry would overflow storage [ 293.455260][ T6592] rock: sig=0x66, size=4, remaining=3 [ 293.734723][ T6597] loop1: detected capacity change from 0 to 128 [ 297.962607][ T6615] loop1: detected capacity change from 0 to 128 [ 298.110637][ T6546] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.244153][ T6646] loop1: detected capacity change from 0 to 128 [ 307.492125][ T6651] loop1: detected capacity change from 0 to 128 [ 315.615850][ T6687] loop1: detected capacity change from 0 to 128 [ 315.733627][ T6649] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.114266][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.128569][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 326.952952][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.240635][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.420516][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.527801][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.849724][ T11] hsr_slave_0: left promiscuous mode [ 328.856607][ T11] hsr_slave_1: left promiscuous mode [ 328.865829][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.873638][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.883012][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.891379][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.899951][ T11] bridge_slave_1: left allmulticast mode [ 328.905923][ T11] bridge_slave_1: left promiscuous mode [ 328.912802][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.924393][ T11] bridge_slave_0: left allmulticast mode [ 328.930423][ T11] bridge_slave_0: left promiscuous mode [ 328.936211][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.960756][ T11] veth1_macvtap: left promiscuous mode [ 328.966634][ T11] veth0_macvtap: left promiscuous mode [ 328.972375][ T11] veth1_vlan: left promiscuous mode [ 328.978806][ T11] veth0_vlan: left promiscuous mode [ 329.562213][ T11] team0 (unregistering): Port device team_slave_1 removed [ 329.605782][ T11] team0 (unregistering): Port device team_slave_0 removed [ 329.657595][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.703958][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.044345][ T11] bond0 (unregistering): Released all slaves [ 330.487453][ T991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.545587][ T991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.602582][ T991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.653017][ T991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.806728][ T991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.875488][ T991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.962784][ T991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.022964][ T991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.205213][ T991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.290286][ T991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.354997][ T991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.443307][ T991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.288382][ T991] hsr_slave_0: left promiscuous mode [ 333.309851][ T991] hsr_slave_1: left promiscuous mode [ 333.316134][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.328000][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.348691][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.363692][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.384990][ T991] bridge_slave_1: left allmulticast mode [ 333.391117][ T991] bridge_slave_1: left promiscuous mode [ 333.397795][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.411770][ T991] bridge_slave_0: left allmulticast mode [ 333.417712][ T991] bridge_slave_0: left promiscuous mode [ 333.425181][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.447127][ T991] hsr_slave_0: left promiscuous mode [ 333.453547][ T991] hsr_slave_1: left promiscuous mode [ 333.466497][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.474370][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.486429][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.495269][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.515041][ T991] bridge_slave_1: left allmulticast mode [ 333.521412][ T991] bridge_slave_1: left promiscuous mode [ 333.536416][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.553568][ T991] bridge_slave_0: left allmulticast mode [ 333.559422][ T991] bridge_slave_0: left promiscuous mode [ 333.565084][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.588109][ T991] hsr_slave_0: left promiscuous mode [ 333.594464][ T991] hsr_slave_1: left promiscuous mode [ 333.602212][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.612550][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.621032][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.628799][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.636566][ T991] bridge_slave_1: left allmulticast mode [ 333.642740][ T991] bridge_slave_1: left promiscuous mode [ 333.649355][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.658612][ T991] bridge_slave_0: left allmulticast mode [ 333.664363][ T991] bridge_slave_0: left promiscuous mode [ 333.670244][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.710651][ T991] veth1_macvtap: left promiscuous mode [ 333.716225][ T991] veth0_macvtap: left promiscuous mode [ 333.723492][ T991] veth1_vlan: left promiscuous mode [ 333.728960][ T991] veth0_vlan: left promiscuous mode [ 333.737293][ T991] veth1_macvtap: left promiscuous mode [ 333.744820][ T991] veth0_macvtap: left promiscuous mode [ 333.750820][ T991] veth1_vlan: left promiscuous mode [ 333.756126][ T991] veth0_vlan: left promiscuous mode [ 333.765746][ T991] veth1_macvtap: left promiscuous mode [ 333.771653][ T991] veth0_macvtap: left promiscuous mode [ 333.777302][ T991] veth1_vlan: left promiscuous mode [ 333.783106][ T991] veth0_vlan: left promiscuous mode