last executing test programs: 10.479743897s ago: executing program 1 (id=1817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008c80)="9d", 0x1}], 0x1}, 0x0) 10.479563867s ago: executing program 1 (id=1818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) 10.408733369s ago: executing program 4 (id=1820): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r5, 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$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") 10.244350494s ago: executing program 1 (id=1821): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$eJzs3M1vG0UbAPDHduw0bfMmbykfLS0ECqLiI2nSD3rgUgQSB5CQAKmIU0jSqtRtUBMkWlVQOJQjqsQdcUTiL+BCuSDghMQV7gipQrlQOCCjtXdTJ7GTOHbiUP9+0tYzntnOPLs76/GuNwH0rJHkn1zE7oj4JSKGatmlFUZqL7cXrk79tXB1KheVymt/5Kr1/ly4OpVVzdbbVctUKqu0e/2tiMlyeeZSmh+bv/Du2NzlK8+cuzB5dubszMWJkyePHT1YOjFxvL0A+2svg0lf938we2DfS2/eeGXq9I23f/gq6e/utFp9HJ0yUtu6DT3e6ca6bLAunevrYkdoSSEikt1VrI7/oSjEwGLZULz4cVc7B2yqSiVf+ad58bUKcBdLJuprK1XPFcDdJPugT77/ZssWTT22hVunYvE6xu10qZX0RT6tU0y/I22GkYg4fe3vz5MlNuk6BABAvZunIuLpRvO/fNxXV+9/6b2h4Yj4f0TsiYh7ImJvRNwbUa17f0Q80GL7y++QrJz/VIY2FNg6JfO/59J7W0vnf9nsL4YLaW6wGn8xd+ZceeZIuk0OR7E/yY+v0sa3L/z8abOy+vlfsiTtZ3PBtB+/9/UvXWd6cn6ynZjr3fooYn9fo/hzi3PeZH68LyL2b7CNc09+eaBZ2drxr6IDk/LKFxFP1Pb/tVgWfybX9P7k+LMnJo6P7YjyzJGx7KhY6cefrr/arP224u+AWzcrsTM7/geiUfzDuR0Rc5evnK/er51rvY3rv37S9DvNRo//Uu71arqUvvf+5Pz8pfGIUu7lle9P3Fk3y2f1k+P/8KHG439P3NkSD0ZEchAfjIiHIuLhtO+PRMSjEXFolfi/f/6xd1qPv3+V/7FzkvinG57/6vZ/1O//1hOF89993Xr8mWT/H6umDqfvrOf8t94OtrPtAAAA4L8iX/0NfC4/upjO50dHa7/h3xs78+XZufmnzsy+d3G69lv54SjmsytdQ3XXQ8fTa8NZfmJZ/mh63fizwkA1Pzo1W57udvDQ43Y1Gf+J3wrd7h2w6TyvBb3L+IfeZfxD7zL+oXcZ/9C7Go3/D7vQD2DrrfH5P7BV/QC2nvk/9C7jH3qX8Q89qemz8fm2HvnvpcQbgxHboBu1xDel9v5Ww/oTkd/o6jvSY297bLHtkyhGw6K+zd5Q/Q2LunxiAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JB/AwAA//8ynNnU") socket$inet_icmp_raw(0x2, 0x3, 0x1) 10.108533559s ago: executing program 2 (id=1822): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r4, 0x1) 8.967333625s ago: executing program 3 (id=1825): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfc, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 8.958451245s ago: executing program 1 (id=1826): syz_emit_vhci(0x0, 0x7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f00000000c0)={[{@block_validity}, {@nojournal_checksum}]}, 0x1, 0x518, &(0x7f0000000640)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') r5 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x22}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x24044800) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x163}, @l2cap_cid_signaling={{0x15f}, [@l2cap_info_rsp={{0xb, 0xda, 0xe4}, {0x6, 0x1, "075459fa0a7dc5f9ab3845f64f0e873716ad938340919c0397dff7d1280dcc96d6dff950a48d30bc80b9bafaa8b5bef7ca6699cc1a1755f8b451b291c04cb8e067ee79a1cf9e5e667cd31e5a64f7e48c425541dc5b75cd052d3cdba57e1f71fcf7c8b19aa1042127b643b373f2a56c27ffc2a1a68df1938e3adc7c53b5008e8d87b6b4dcf06728182eda816f1298ddb459629f725a59216286961d964fee5bad8dfd6d98c04533fb60285fdeff29a013a65863973fc7536f9abc35dbbfed8796a885b85039d1c4372a0d510c22c413cacedb132f5746857cd63d2968a30d0021"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x7f}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xc}}, @l2cap_conf_req={{0x4, 0x7, 0x1a}, {0xf, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x9d, 0x1, 0x8, 0xa0000000, 0x5, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}, @l2cap_conf_req={{0x4, 0x0, 0x3f}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xfe, 0x2, 0x5, 0x0, 0xd, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0xd2, 0x1, 0x7, 0x1, 0x2, 0xfff}}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xa}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x4, 0x8, 0x275, 0x573f, 0x100}}]}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x9, 0x3}}]}}, 0x168) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) 8.82863051s ago: executing program 0 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000200), &(0x7f0000000580)=[r4], &(0x7f0000000040)}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000000)={0x8, 0x2000, "9d71857da9e3f165a86aba0f67557a0b160306d3e8df72e0", {0x8001, 0x1}, 0x4d}) 8.801434511s ago: executing program 2 (id=1829): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008c80)="9d", 0x1}], 0x1}, 0x0) 8.800502491s ago: executing program 4 (id=1830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)}, 0x0) 8.309011966s ago: executing program 2 (id=1831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) 7.282682299s ago: executing program 0 (id=1832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x1000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000003900), 0x34aa945a513d639, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_get$pid(0x3, r1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7.275370288s ago: executing program 3 (id=1833): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7.085188825s ago: executing program 2 (id=1834): syz_emit_vhci(0x0, 0x7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f00000000c0)={[{@block_validity}, {@nojournal_checksum}]}, 0x1, 0x518, &(0x7f0000000640)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') r5 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x22}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x24044800) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x163}, @l2cap_cid_signaling={{0x15f}, [@l2cap_info_rsp={{0xb, 0xda, 0xe4}, {0x6, 0x1, "075459fa0a7dc5f9ab3845f64f0e873716ad938340919c0397dff7d1280dcc96d6dff950a48d30bc80b9bafaa8b5bef7ca6699cc1a1755f8b451b291c04cb8e067ee79a1cf9e5e667cd31e5a64f7e48c425541dc5b75cd052d3cdba57e1f71fcf7c8b19aa1042127b643b373f2a56c27ffc2a1a68df1938e3adc7c53b5008e8d87b6b4dcf06728182eda816f1298ddb459629f725a59216286961d964fee5bad8dfd6d98c04533fb60285fdeff29a013a65863973fc7536f9abc35dbbfed8796a885b85039d1c4372a0d510c22c413cacedb132f5746857cd63d2968a30d0021"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x7f}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xc}}, @l2cap_conf_req={{0x4, 0x7, 0x1a}, {0xf, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x9d, 0x1, 0x8, 0xa0000000, 0x5, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}, @l2cap_conf_req={{0x4, 0x0, 0x3f}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xfe, 0x2, 0x5, 0x0, 0xd, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0xd2, 0x1, 0x7, 0x1, 0x2, 0xfff}}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xa}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x4, 0x8, 0x275, 0x573f, 0x100}}]}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x9, 0x3}}]}}, 0x168) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) 7.048071096s ago: executing program 4 (id=1835): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$eJzsmb9uE0EQxr9dn892BAgaCqQIJCIRpOR8dwaUhiK8AEgJf9IRYQcFjhg5VySREFg0NDwGr0CRioKOjhYKQEKiwCWiQot2d3y3wfbFkTEN85Oy9+3s3O7M5G4s2WAY5r/ly+cfn15eW1pdAHCsPIcK2b+Vch/p+H+skvjw6u3WiSf7zpIS5Cvs/M2YIWzMLpeQ9jdRSrmLc3Rdhcz0TUhcJH0bAgHpu5C4BeAkzdeO2+sDCKyRrV0jkbSCe+2kubGZtEI9RHqI9dBwz/cA9LoCTQBVik8469u7ew/Xk6TVMULmlrLqn9M56HN0UVQ8D/B6yxJXnfrpKO68eN7V835tQqd+ESQi0g0IrJBeQgVBEOhHwJbEyf+Ml+9fGpl/Jpo/gQP565gOzfZ6efJiaeHDilOLRc4LE50lD0+nSPgA/kKm4wr9Xo7lrGrmX/z0j6Xuvwt1+kI4lpoW+oXOLKd7++8G7/o6zcDOTTdlUM8eWHo/k1uy93XoPrPNX2JwZ5/uGXp63j91y73g9CcPXtY/6umjx/Xt3b3FTR3k/dZWHDeuhJfC8HJcN73ZjgX9r2r604yzf3mEry987KynaSfaAdJOlM1jOzodd+V1+7u5R5r+JzF/3u6hHxWTdmX4GYL+7OegVvOlkcEzDMMwDMMwDMMwDMMwDMMcibMQ5ltQ+qFKKYVndkW5xDeM7XcAAAD//zpYS8g=") socket$unix(0x1, 0x5, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) 5.0396873s ago: executing program 0 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000054c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, 'uid>', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x4f, 0x43]}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f00000192", 0x21}], 0x1) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4903, 0x3a, 'uid>', 0x3a, '*', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x43]}, 0x2f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe0a0ffd997287dd5}, 0x40080) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r7, r6, 0x12, 0x6}, 0x10) 5.03898972s ago: executing program 3 (id=1837): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000190c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_open_dev$I2C(&(0x7f0000019080), 0x401, 0xc0000) madvise(&(0x7f0000441000/0x2000)=nil, 0x2000, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.813241417s ago: executing program 4 (id=1838): syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000340), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008894}, 0x40000) 4.012902533s ago: executing program 3 (id=1839): syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfdb0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x4008081) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008894}, 0x40000) 3.935829155s ago: executing program 0 (id=1840): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x4, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$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") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.932905085s ago: executing program 4 (id=1841): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x4, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$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") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.928764157s ago: executing program 2 (id=1842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x1000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") ioprio_get$pid(0x3, r1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.928348097s ago: executing program 3 (id=1843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000200), &(0x7f0000000580)=[r4], &(0x7f0000000040)}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000000)={0x8, 0x2000, "9d71857da9e3f165a86aba0f67557a0b160306d3e8df72e0", {0x8001, 0x1}, 0x4d}) 2.888824308s ago: executing program 1 (id=1844): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="9b00b9c3bae473b1ae4ee1ce703d4e2a787a5aec8dbc762bf406539dc97deea6501ba10045aae3"], 0x44}}, 0x0) 2.866855179s ago: executing program 0 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)}, 0x0) 2.805631321s ago: executing program 4 (id=1846): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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") socket$unix(0x1, 0x5, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) 924.917321ms ago: executing program 3 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) close(0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xa0000019}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x207, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x8, 0x0, 0x1, 0x2c43, 0x9fe, 0x2800000000000, 0x0, 0x8006, 0x0, 0x2902, 0x20, 0x800ffffffff, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, 0x1ff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0x112878e22b940e72}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r6, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 101.329037ms ago: executing program 0 (id=1848): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 28.685679ms ago: executing program 2 (id=1849): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 1 (id=1850): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) pwrite64(r4, 0x0, 0x0, 0x8080c61) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1000000000007) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered forwarding state [ 33.527732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.530528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.532203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.533422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.534905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.540068][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.541976][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.547371][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.552154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.553912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.556072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.557597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.559762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.564765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.577195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.580757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.582642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.584280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.585945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.587608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.594782][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.596727][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.602443][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.604191][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.605944][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.607555][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.610328][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.620865][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.622962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.624527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.626554][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.631598][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.633238][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.634496][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.641154][ T215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.646002][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.652148][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.653997][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.655511][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.656759][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.673314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.676119][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.680303][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.685594][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.689694][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.691849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.693473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.694955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.696472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.706677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.709876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.711711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.713567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.715256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.716978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.720078][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.721412][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.722974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.724724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.726340][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.727656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.751389][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.755408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.757091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.759010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.760601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.762275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.763868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.765483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.767073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.769219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.770821][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.772041][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.773497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.774902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.776235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.783819][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.790078][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.793383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.795189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.796770][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.798003][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.800894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.802382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.803779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.805529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.807286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.809932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.811586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.813382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.815098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.816722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.819102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.827966][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.830550][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.832370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.834202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.835827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.850759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.852601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.854300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.855964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.858739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.860626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.862388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.878985][ T4326] device veth0_vlan entered promiscuous mode [ 33.881758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.883452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.885185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.886983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.891949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.893941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.901782][ T4337] device veth0_vlan entered promiscuous mode [ 33.903201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.904835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.906884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.909257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.910849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.912525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.916792][ T4326] device veth1_vlan entered promiscuous mode [ 33.923905][ T4337] device veth1_vlan entered promiscuous mode [ 33.926584][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.929873][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.931781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.933434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.935081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.936725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.956439][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.960331][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.962088][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.963557][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.970291][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.973718][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.975156][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.991130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.992831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.994547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.004863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.006720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.011165][ T4326] device veth0_macvtap entered promiscuous mode [ 34.013024][ T4337] device veth0_macvtap entered promiscuous mode [ 34.015692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.017328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.022792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.024660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.026881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.029431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.032655][ T4326] device veth1_macvtap entered promiscuous mode [ 34.042171][ T4337] device veth1_macvtap entered promiscuous mode [ 34.051267][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.052749][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.054419][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.055991][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.057563][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.066503][ T4327] device veth0_vlan entered promiscuous mode [ 34.071084][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.072785][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.074616][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.076191][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.079894][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.083649][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.085361][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.087233][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.089785][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.092189][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.093658][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.095399][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.100617][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.102169][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.103642][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.105179][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110487][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.111984][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.113391][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.115065][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.116764][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.119483][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.122543][ T4331] device veth0_vlan entered promiscuous mode [ 34.124973][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.127890][ T4327] device veth1_vlan entered promiscuous mode [ 34.130623][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.132569][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.134865][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.137068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.138849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.140855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.142519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.150114][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.151681][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.153327][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.154919][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.162454][ T4331] device veth1_vlan entered promiscuous mode [ 34.181222][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.182875][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.184520][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.186148][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.203043][ T4327] device veth0_macvtap entered promiscuous mode [ 34.215737][ T4327] device veth1_macvtap entered promiscuous mode [ 34.234470][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.236207][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.237702][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.239546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.240252][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.240983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.244697][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.253527][ T4331] device veth0_macvtap entered promiscuous mode [ 34.256713][ T4331] device veth1_macvtap entered promiscuous mode [ 34.275951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.277641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.280964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.282720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.288835][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.290708][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.292400][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.294213][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.296547][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.303920][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.305779][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.311324][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.312942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.314398][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.316707][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.318351][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.324726][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.326635][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.329591][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.331427][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.333825][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.335230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.336794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.339103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.341014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.342735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.344725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.346263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.349447][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.351358][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.353098][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.354998][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.356697][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.361419][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.363918][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.372585][ T4332] device veth0_vlan entered promiscuous mode [ 34.378913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.380822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.389093][ T4332] device veth1_vlan entered promiscuous mode [ 34.391388][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.391988][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392813][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.394302][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.397179][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.399543][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.405483][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.407589][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.411708][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.413722][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.415910][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.417712][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.420575][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.423461][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.425132][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.442779][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.444528][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.446147][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.447707][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.467025][ T4332] device veth0_macvtap entered promiscuous mode [ 34.477354][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.479318][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.481973][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.501626][ T4332] device veth1_macvtap entered promiscuous mode [ 34.566356][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.567607][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.571187][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.572063][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.573837][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.576426][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.581520][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.583431][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.585286][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.587174][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.590708][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.596101][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.696565][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.762393][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.876532][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.878575][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.897263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.916096][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.918506][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.920323][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.922221][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.923970][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.926235][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.928860][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.930685][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.933286][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.937447][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.939520][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.941022][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.941939][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.944619][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.952775][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.954499][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.956168][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.957944][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.987825][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.994509][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.003609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.010642][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.012106][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.013697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.060080][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.061593][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.072965][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.083355][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.085163][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.086817][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.368578][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 35.369961][ T4335] Bluetooth: hci3: command 0x041b tx timeout [ 35.404289][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 35.405601][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 35.448405][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 35.785597][ T4433] binder: 4432:4433 unknown command 1074553619 [ 35.787060][ T4433] binder: 4432:4433 ioctl c0306201 20000040 returned -22 [ 35.792781][ T4433] binder: 4432:4433 unknown command 1074553620 [ 35.794251][ T4433] binder: 4432:4433 ioctl c0306201 20000640 returned -22 [ 36.570445][ T4438] overlayfs: missing 'lowerdir' [ 37.539794][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 37.539823][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 37.542375][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 37.575678][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 37.577248][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 39.608760][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 39.610530][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 40.083814][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 40.107242][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 40.107329][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 40.371190][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.389221][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.390540][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.430681][ T4501] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 40.432922][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.502183][ T4502] device veth0_virt_wifi entered promiscuous mode [ 40.581145][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 40.954178][ T4513] overlayfs: missing 'lowerdir' [ 41.952429][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.954189][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.955610][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.098054][ T4328] Bluetooth: hci4: command 0x0405 tx timeout [ 42.888842][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 43.912968][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 44.817177][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 44.820576][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 44.863180][ T4635] ceph: No mds server is up or the cluster is laggy [ 45.283305][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 45.380670][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.383791][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.385833][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.387591][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.495307][ T27] audit: type=1326 audit(45.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.499675][ T27] audit: type=1326 audit(45.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.504496][ T27] audit: type=1326 audit(45.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.509057][ T27] audit: type=1326 audit(45.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.513679][ T27] audit: type=1326 audit(45.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.518348][ T27] audit: type=1326 audit(45.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.522931][ T27] audit: type=1326 audit(45.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 45.906752][ T27] audit: type=1326 audit(45.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 46.706807][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 46.971150][ T4707] process 'syz.4.97' launched './file0' with NULL argv: empty string added [ 47.140118][ T4716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'. [ 47.491580][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 49.171067][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 50.295115][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.299725][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.893765][ T4802] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 50.906613][ T4802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.916665][ T4802] bond1: (slave veth3): Enslaving as an active interface with a down link [ 51.138062][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 51.150080][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.151650][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.180755][ T4816] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.183259][ T4816] Cannot find add_set index 0 as target [ 51.478379][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.658925][ T4375] usb 1-1: Using ep0 maxpacket: 16 [ 51.665288][ T4375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 51.670844][ T4375] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 51.672765][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.677246][ T4375] usb 1-1: Product: syz [ 51.681913][ T4375] usb 1-1: Manufacturer: syz [ 51.683818][ T4375] usb 1-1: SerialNumber: syz [ 51.695967][ T4375] usb 1-1: config 0 descriptor?? [ 51.708797][ T4375] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 51.712921][ T4375] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 51.798501][ T4826] device syzkaller0 entered promiscuous mode [ 52.533594][ T4375] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 53.178149][ T4375] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 53.180136][ T4375] em28xx 1-1:0.0: board has no eeprom [ 54.319307][ T4375] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 54.321018][ T4375] em28xx 1-1:0.0: dvb set to bulk mode. [ 54.322837][ T4461] em28xx 1-1:0.0: Binding DVB extension [ 54.340569][ T4461] em28xx 1-1:0.0: Registering input extension [ 54.437304][ T4869] Cannot find add_set index 0 as target [ 63.721545][ T4843] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 63.730114][ T4461] usb 1-1: USB disconnect, device number 2 [ 63.731583][ T4461] em28xx 1-1:0.0: Disconnecting em28xx [ 63.732619][ T4461] em28xx 1-1:0.0: Closing input extension [ 63.741929][ T4461] em28xx 1-1:0.0: Freeing device [ 63.762501][ T4871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.148'. [ 63.765283][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.766695][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.842749][ T4882] device syzkaller0 entered promiscuous mode [ 64.777593][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.812098][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.201106][ T4908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.202759][ T4908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.214943][ T4908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 65.849816][ T4922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 65.992808][ T4924] device syzkaller0 entered promiscuous mode [ 69.609455][ T22] cfg80211: failed to load regulatory.db [ 77.101258][ T4928] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 77.237858][ T4988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.239851][ T4988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.245304][ T4988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 78.371177][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 78.375991][ T5012] Cannot find add_set index 0 as target [ 78.383894][ T5014] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.383988][ T5014] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.738607][ T5018] device syzkaller0 entered promiscuous mode [ 81.184179][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.186285][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.786384][ T5020] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 89.806449][ T5064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 91.267813][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.274067][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.293458][ T5103] Zero length message leads to an empty skb [ 91.296930][ T5105] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 91.317587][ T5105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.326066][ T5103] device syzkaller0 entered promiscuous mode [ 91.334946][ T5105] bond1: (slave veth3): Enslaving as an active interface with a down link [ 91.918107][ T4717] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.098122][ T4717] usb 1-1: Using ep0 maxpacket: 16 [ 92.101531][ T4717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 92.105052][ T4717] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.106738][ T4717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.108869][ T4717] usb 1-1: Product: syz [ 92.109617][ T4717] usb 1-1: Manufacturer: syz [ 92.110430][ T4717] usb 1-1: SerialNumber: syz [ 92.112319][ T4717] usb 1-1: config 0 descriptor?? [ 92.115324][ T4717] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.117203][ T4717] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 92.719471][ T4717] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 93.228798][ T4717] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.230400][ T4717] em28xx 1-1:0.0: board has no eeprom [ 94.398081][ T4717] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.399806][ T4717] em28xx 1-1:0.0: dvb set to bulk mode. [ 94.405661][ T4717] em28xx 1-1:0.0: Binding DVB extension [ 94.423119][ T4717] em28xx 1-1:0.0: Registering input extension [ 101.948415][ T1966] usb 1-1: USB disconnect, device number 3 [ 101.949784][ T1966] em28xx 1-1:0.0: Disconnecting em28xx [ 101.950741][ T1966] em28xx 1-1:0.0: Closing input extension [ 101.956638][ T1966] em28xx 1-1:0.0: Freeing device [ 102.816971][ T5153] Cannot find add_set index 0 as target [ 103.549218][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.554785][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.569640][ T5176] device syzkaller0 entered promiscuous mode [ 103.571689][ T5177] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 103.579005][ T5177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.533175][ T5177] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.860224][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.236'. [ 115.815337][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.824059][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.939349][ T5258] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 115.950656][ T5258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.960143][ T5257] device syzkaller0 entered promiscuous mode [ 115.967900][ T5258] bond1: (slave veth3): Enslaving as an active interface with a down link [ 116.860578][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.862319][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.928394][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929646][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.159480][ T5285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 127.184960][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 127.516625][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 128.745798][ T5328] kAFS: No cell specified [ 128.921283][ T5337] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 129.220297][ T5337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.229259][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 129.232464][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.233946][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.254795][ T5347] device syzkaller0 entered promiscuous mode [ 129.266520][ T5348] bond1: (slave veth3): Enslaving as an active interface with a down link [ 129.715381][ T5362] Bluetooth: MGMT ver 1.22 [ 129.716871][ T5362] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 129.808293][ T5367] kAFS: No cell specified [ 131.171084][ T5383] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 733 out of range (51000000..2150000000) [ 141.530019][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.532276][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.533601][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.536644][ T5393] device bridge_slave_0 left promiscuous mode [ 141.537854][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.643399][ T5393] device bridge_slave_1 left promiscuous mode [ 141.644668][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.649522][ T5413] ufs: You didn't specify the type of your ufs filesystem [ 141.649522][ T5413] [ 141.649522][ T5413] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 141.649522][ T5413] [ 141.649522][ T5413] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 141.655149][ T5413] ufs: ufstype=old is supported read-only [ 141.661017][ T5413] ufs: ufs_fill_super(): bad magic number [ 141.979476][ T5393] bond0: (slave bond_slave_0): Releasing backup interface [ 142.081758][ T5393] bond0: (slave bond_slave_1): Releasing backup interface [ 142.764904][ T5393] team0: Port device team_slave_0 removed [ 142.774434][ T5393] team0: Port device team_slave_1 removed [ 142.778489][ T5393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.780144][ T5393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.782835][ T5393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.784376][ T5393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.790330][ T5393] bond1: (slave veth3): Releasing active interface [ 142.842669][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 143.017536][ T4717] libceph: connect (1)[c::]:6789 error -101 [ 143.018931][ T4717] libceph: mon0 (1)[c::]:6789 connect error [ 143.366487][ T110] libceph: connect (1)[c::]:6789 error -101 [ 143.370762][ T110] libceph: mon0 (1)[c::]:6789 connect error [ 143.431490][ T5435] ceph: No mds server is up or the cluster is laggy [ 143.814696][ T5449] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 143.840697][ T4328] Bluetooth: hci2: Dropping invalid advertising data [ 145.740529][ T5509] input: syz0 as /devices/virtual/input/input4 [ 145.778910][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.787852][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.978347][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.012934][ T5517] netlink: 72 bytes leftover after parsing attributes in process `syz.1.326'. [ 146.496602][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 146.500581][ T22] usb 1-1: config 3 has an invalid interface number: 20 but max is 0 [ 146.502332][ T22] usb 1-1: config 3 has no interface number 0 [ 146.504553][ T22] usb 1-1: config 3 interface 20 has no altsetting 0 [ 146.509018][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 146.513038][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.515990][ T22] usb 1-1: Product: syz [ 146.516842][ T22] usb 1-1: Manufacturer: syz [ 146.518914][ T22] usb 1-1: SerialNumber: syz [ 146.527576][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.530609][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.914083][ T5505] loop5: detected capacity change from 0 to 7 [ 146.917786][ T5463] Dev loop5: unable to read RDB block 7 [ 146.919074][ T5463] loop5: unable to read partition table [ 146.920445][ T5463] loop5: partition table beyond EOD, truncated [ 146.938960][ T5505] Dev loop5: unable to read RDB block 7 [ 146.940106][ T5505] loop5: unable to read partition table [ 146.941241][ T5505] loop5: partition table beyond EOD, truncated [ 146.942741][ T5505] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.965251][ T22] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input5 [ 146.973834][ T22] usb 1-1: USB disconnect, device number 4 [ 148.279003][ T5543] syz.2.336 (5543): drop_caches: 3 [ 149.244543][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.247149][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.360834][ T1665] block nbd3: Attempted send on invalid socket [ 150.362193][ T1665] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.363993][ T5614] befs: (nbd3): unable to read superblock [ 150.466638][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.474225][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.128139][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 153.406783][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 153.640158][ T5697] netlink: 'syz.2.391': attribute type 2 has an invalid length. [ 153.655160][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 153.655186][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 153.668281][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 153.677027][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 155.084308][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.086008][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.172132][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 156.041475][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.045759][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.180303][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.668213][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 156.677100][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.679381][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.681278][ T14] usb 1-1: Product: syz [ 156.682009][ T14] usb 1-1: Manufacturer: syz [ 156.682848][ T14] usb 1-1: SerialNumber: syz [ 156.685298][ T14] usb 1-1: config 0 descriptor?? [ 156.765720][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.767960][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.799095][ T5784] input: syz0 as /devices/virtual/input/input6 [ 156.889293][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.727589][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.744220][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.768574][ T5802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'. [ 157.993647][ T5819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.436'. [ 158.785285][ T5829] IPv6: sit1: Disabled Multicast RS [ 158.787709][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 158.793250][ T14] usb 1-1: USB disconnect, device number 5 [ 160.062087][ T4338] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 160.063968][ T4338] Bluetooth: hci2: Injecting HCI hardware error event [ 160.065951][ T4338] Bluetooth: hci2: hardware error 0x00 [ 160.389392][ T5891] netlink: 'syz.1.467': attribute type 5 has an invalid length. [ 160.395686][ T5891] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.397547][ T5891] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.399253][ T5891] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.401013][ T5891] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.411136][ T5891] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.413032][ T5891] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.415394][ T5891] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.417180][ T5891] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.526523][ T5897] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.956793][ T5899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.342583][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.350715][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.573595][ T4338] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.589042][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.590886][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.562772][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.564535][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.874300][ T5956] sched: RT throttling activated [ 166.320988][ T5996] binder: 5995:5996 tried to acquire reference to desc 0, got 1 instead [ 166.323577][ T5996] binder: 5995:5996 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 166.326403][ T5996] binder: 5996 RLIMIT_NICE not set [ 166.380476][ T5996] binder: 5996 RLIMIT_NICE not set [ 166.383097][ T14] binder: release 5995:5997 transaction 7 out, still active [ 166.384545][ T14] binder: undelivered TRANSACTION_COMPLETE [ 166.433235][ T14] binder: release 5995:5996 transaction 7 in, still active [ 166.434825][ T14] binder: send failed reply for transaction 7, target dead [ 166.493379][ C1] hrtimer: interrupt took 393789 ns [ 168.369515][ T6030] input: syz1 as /devices/virtual/input/input7 [ 168.395596][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.397421][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.951915][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.156403][ T14] usb 1-1: config 0 has an invalid interface number: 3 but max is 1 [ 169.158212][ T14] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 169.159904][ T14] usb 1-1: config 0 has an invalid interface number: 51 but max is 1 [ 169.161436][ T14] usb 1-1: config 0 has no interface number 0 [ 169.164805][ T14] usb 1-1: config 0 has no interface number 1 [ 169.169550][ T14] usb 1-1: config 0 interface 3 altsetting 8 bulk endpoint 0xD has invalid maxpacket 1024 [ 169.173976][ T14] usb 1-1: config 0 interface 3 has no altsetting 0 [ 169.177140][ T14] usb 1-1: config 0 interface 51 has no altsetting 0 [ 169.184253][ T14] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=e0.08 [ 169.186106][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.196344][ T14] usb 1-1: Product: syz [ 169.197197][ T14] usb 1-1: Manufacturer: syz [ 169.199716][ T14] usb 1-1: SerialNumber: syz [ 169.244503][ T14] usb 1-1: config 0 descriptor?? [ 169.248874][ T6042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.359140][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.362170][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.473576][ T14] usb 1-1: USB disconnect, device number 6 [ 170.092342][ T6072] overlayfs: missing 'workdir' [ 170.960963][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.156345][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 171.403797][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.410834][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.412677][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.414323][ T14] usb 1-1: Product: syz [ 171.415110][ T14] usb 1-1: Manufacturer: syz [ 171.418433][ T14] usb 1-1: SerialNumber: syz [ 171.424662][ T14] usb 1-1: config 0 descriptor?? [ 171.443206][ T14] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.444892][ T14] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 171.662501][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 172.391799][ T14] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 172.479779][ T14] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.481519][ T14] em28xx 1-1:0.0: board has no eeprom [ 172.553393][ T14] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.555484][ T14] em28xx 1-1:0.0: dvb set to bulk mode. [ 172.556914][ T4477] em28xx 1-1:0.0: Binding DVB extension [ 172.569128][ T14] usb 1-1: USB disconnect, device number 7 [ 172.571071][ T14] em28xx 1-1:0.0: Disconnecting em28xx [ 172.664465][ T4477] em28xx 1-1:0.0: Registering input extension [ 172.665969][ T14] em28xx 1-1:0.0: Closing input extension [ 172.673807][ T14] em28xx 1-1:0.0: Freeing device [ 175.566997][ T6170] binder: 6169:6170 tried to acquire reference to desc 0, got 1 instead [ 175.578003][ T6170] binder: 6169:6170 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 175.580524][ T6170] binder: 6170 RLIMIT_NICE not set [ 175.634824][ T6170] binder: 6170 RLIMIT_NICE not set [ 175.639413][ T4461] binder: release 6169:6172 transaction 12 out, still active [ 175.641270][ T4461] binder: undelivered TRANSACTION_COMPLETE [ 175.662610][ T14] binder: release 6169:6170 transaction 12 in, still active [ 175.664231][ T14] binder: send failed reply for transaction 12, target dead [ 176.909072][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 178.819952][ T6228] netlink: 'syz.0.586': attribute type 2 has an invalid length. [ 181.120727][ T6273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.596'. [ 181.536154][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.597'. [ 181.543748][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.545307][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.115662][ T6321] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.424711][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.437610][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.026611][ T4377] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.218974][ T4377] usb 1-1: Using ep0 maxpacket: 32 [ 188.223727][ T4377] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 188.225314][ T4377] usb 1-1: config 2 has no interface number 0 [ 188.226350][ T4377] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 188.228322][ T4377] usb 1-1: config 2 interface 88 has no altsetting 0 [ 188.231668][ T4377] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 188.233478][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 188.234888][ T4377] usb 1-1: Product: syz [ 188.235584][ T4377] usb 1-1: Manufacturer: syz [ 188.236459][ T4377] usb 1-1: SerialNumber: syz [ 188.239410][ T6377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.499019][ T6377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.959542][ T6395] syz.3.633 (6395): drop_caches: 2 [ 189.411898][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.414061][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.688088][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 189.754865][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.756850][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.846373][ T4377] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 189.850767][ T4377] asix: probe of 1-1:2.88 failed with error -71 [ 189.858003][ T4377] usb 1-1: USB disconnect, device number 8 [ 189.922073][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.924029][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.720749][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.725571][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.864654][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.869886][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.423565][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.426235][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.644923][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.659496][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.501706][ T6522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.677'. [ 196.672137][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.673715][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.164598][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.167950][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.380914][ T6537] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 198.892621][ T6565] ubi16: attaching mtd0 [ 198.895008][ T6565] ubi16: scanning is finished [ 198.895915][ T6565] ubi16: empty MTD device detected [ 198.922522][ T6565] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 198.924108][ T6565] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 198.925706][ T6565] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 198.927266][ T6565] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 198.928740][ T6565] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 198.930114][ T6565] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 198.931672][ T6565] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3464521935 [ 198.933659][ T6565] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 198.936568][ T6567] ubi16: background thread "ubi_bgt16d" started, PID 6567 [ 200.545030][ T6588] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 200.549075][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.557280][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.503835][ T6611] binder: 6610:6611 got reply transaction with no transaction stack [ 201.515056][ T6611] binder: 6610:6611 transaction reply to 0:0 failed 13/29201/-71, size 0-0 line 2946 [ 203.326513][ T3992] device veth1_vlan left promiscuous mode [ 203.359585][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.444865][ T4477] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.935137][ T4477] usb 1-1: Using ep0 maxpacket: 16 [ 205.968010][ T4477] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 205.970005][ T4477] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.971434][ T4477] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.972965][ T4477] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.974380][ T4477] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 205.976100][ T4477] usb 1-1: config 0 has no interface number 0 [ 205.977280][ T4477] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 205.993891][ T4477] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 205.999605][ T4477] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.013472][ T4477] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.016225][ T4477] usb 1-1: config 0 interface 125 has no altsetting 0 [ 206.017561][ T4477] usb 1-1: config 0 interface 125 has no altsetting 2 [ 206.020541][ T4477] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 206.026965][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.028385][ T4477] usb 1-1: Product: syz [ 206.029115][ T4477] usb 1-1: Manufacturer: syz [ 206.029901][ T4477] usb 1-1: SerialNumber: syz [ 206.038333][ T4477] usb 1-1: config 0 descriptor?? [ 206.042206][ T4477] usb 1-1: selecting invalid altsetting 2 [ 206.085271][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.087763][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.095320][ T27] audit: type=1326 audit(202.982:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.100938][ T27] audit: type=1326 audit(202.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.107139][ T27] audit: type=1326 audit(202.991:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.114272][ T27] audit: type=1326 audit(202.991:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.119609][ T27] audit: type=1326 audit(202.991:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.124300][ T27] audit: type=1326 audit(203.001:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.132152][ T27] audit: type=1326 audit(203.001:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.136964][ T27] audit: type=1326 audit(203.001:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.142021][ T27] audit: type=1326 audit(203.001:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 206.147115][ T27] audit: type=1326 audit(203.001:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.3.726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 207.053177][ T6737] misc userio: No port type given on /dev/userio [ 207.267556][ T4477] get_1284_register timeout [ 207.269157][ C0] usb 1-1: async_complete: urb error -104 [ 207.270255][ C0] usb 1-1: async_complete: urb error -104 [ 207.273058][ T4477] usb 1-1: USB disconnect, device number 9 [ 209.765796][ T6780] misc userio: No port type given on /dev/userio [ 210.797359][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 216.226169][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.241805][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.610180][ T6895] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 217.648922][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 219.649410][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.806'. [ 220.150684][ T7005] 9pnet: p9_errstr2errno: server reported unknown error 00000000 [ 220.721561][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 221.119633][ T7039] mmap: syz.0.823 (7039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.377419][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 222.623137][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.624920][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.691274][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 222.691285][ T27] audit: type=1326 audit(218.516:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.700293][ T27] audit: type=1326 audit(218.516:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.705609][ T27] audit: type=1326 audit(218.516:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.712282][ T27] audit: type=1326 audit(218.516:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.717300][ T27] audit: type=1326 audit(218.516:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.722291][ T27] audit: type=1326 audit(218.516:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.741231][ T27] audit: type=1326 audit(218.516:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.762067][ T27] audit: type=1326 audit(218.526:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.771381][ T27] audit: type=1326 audit(218.526:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.776009][ T27] audit: type=1326 audit(218.526:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff93b77aa8 code=0x7ffc0000 [ 222.938747][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 223.447088][ T7106] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 223.456438][ T7106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.464757][ T7106] bond2: (slave gretap1): making interface the new active one [ 223.467574][ T7106] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 223.822230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 225.758653][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 226.435417][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 226.745478][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 226.747311][ T7201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.748882][ T7201] IPv6: NLM_F_CREATE should be set when creating new route [ 226.758383][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 226.760258][ T7201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.137058][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 227.452792][ T7248] loop2: detected capacity change from 0 to 256 [ 227.800775][ T7252] IPVS: stopping master sync thread 7253 ... [ 228.793285][ T7274] ======================================================= [ 228.793285][ T7274] WARNING: The mand mount option has been deprecated and [ 228.793285][ T7274] and is ignored by this kernel. Remove the mand [ 228.793285][ T7274] option from the mount to silence this warning. [ 228.793285][ T7274] ======================================================= [ 229.135434][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.914'. [ 229.998551][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'. [ 230.754002][ T7312] lo speed is unknown, defaulting to 1000 [ 230.755394][ T7312] lo speed is unknown, defaulting to 1000 [ 230.758132][ T7312] lo speed is unknown, defaulting to 1000 [ 230.762752][ T7312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.766410][ T7312] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 230.777223][ T7312] lo speed is unknown, defaulting to 1000 [ 230.778925][ T7312] lo speed is unknown, defaulting to 1000 [ 230.780411][ T7312] lo speed is unknown, defaulting to 1000 [ 230.784739][ T7312] lo speed is unknown, defaulting to 1000 [ 230.786464][ T7312] lo speed is unknown, defaulting to 1000 [ 233.560116][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 233.597392][ T7353] loop2: detected capacity change from 0 to 1024 [ 233.605766][ T7353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.623179][ T7353] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.625482][ T7353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.650678][ T7353] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.939: Invalid inode table block 0 in block_group 0 [ 233.654287][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.655503][ T7353] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 233.657709][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.659016][ T7353] EXT4-fs error (device loop2): ext4_quota_write:7253: inode #3: comm syz.2.939: mark_inode_dirty error [ 233.661141][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.662269][ T7353] __quota_error: 2 callbacks suppressed [ 233.662282][ T7353] Quota error (device loop2): write_blk: dquota write failed [ 233.664372][ T7353] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 233.665977][ T7353] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.939: Failed to acquire dquot type 0 [ 233.668864][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.670811][ T7353] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.939: Invalid inode table block 0 in block_group 0 [ 233.674258][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.675398][ T7353] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 233.677334][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.678503][ T7353] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.939: mark_inode_dirty error [ 233.680734][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.681872][ T7353] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.939: Invalid inode table block 0 in block_group 0 [ 233.685193][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.686404][ T7353] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 233.689752][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.690952][ T7353] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 233.692937][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.694110][ T7353] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.939: Invalid inode table block 0 in block_group 0 [ 233.696466][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.697570][ T7353] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 233.699586][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.700782][ T7353] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.939: mark_inode_dirty error [ 233.702852][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.704033][ T7353] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 233.707235][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 233.708603][ T7353] EXT4-fs (loop2): 1 truncate cleaned up [ 233.709996][ T7353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.857472][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 234.350449][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.355345][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.549495][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 236.705718][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.710329][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.908057][ T7586] loop2: detected capacity change from 0 to 2048 [ 245.917830][ T7586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.599669][ T7602] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.636751][ T7610] loop1: detected capacity change from 0 to 512 [ 246.952711][ T7610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1024: corrupted inode contents [ 246.957872][ T7610] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 246.964131][ T7610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1024: corrupted inode contents [ 246.973494][ T7610] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.1024: mark_inode_dirty error [ 246.986592][ T7610] EXT4-fs (loop1): 1 orphan inode deleted [ 246.995519][ T7610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.333924][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 249.526812][ T7654] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 250.372704][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 255.043462][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.044796][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.483666][ T7769] loop2: detected capacity change from 0 to 764 [ 255.542226][ T4377] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.733430][ T4377] usb 1-1: Using ep0 maxpacket: 16 [ 255.987739][ T4377] usb 1-1: config 6 has an invalid interface number: 221 but max is 0 [ 255.989402][ T4377] usb 1-1: config 6 has no interface number 0 [ 255.990944][ T4377] usb 1-1: config 6 interface 221 has no altsetting 0 [ 256.000350][ T4377] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 256.003740][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.014937][ T4377] usb 1-1: Product: syz [ 256.015734][ T4377] usb 1-1: Manufacturer: syz [ 256.023429][ T4377] usb 1-1: SerialNumber: syz [ 256.282791][ T4377] f81534a_ctrl: probe of 1-1:6.221 failed with error -71 [ 256.292277][ T4377] usb 1-1: USB disconnect, device number 10 [ 256.403471][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.411174][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.016485][ T7810] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1087'. [ 259.061638][ T7828] fuse: Bad value for 'fd' [ 259.741251][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1096'. [ 260.018210][ T7843] loop1: detected capacity change from 0 to 128 [ 260.052767][ T7841] loop4: detected capacity change from 0 to 4096 [ 260.319735][ T7851] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.996530][ T7883] IPVS: stopping backup sync thread 7884 ... [ 262.091838][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 262.547461][ T7892] netlink: 'syz.2.1116': attribute type 12 has an invalid length. [ 262.549291][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 262.555178][ T7892] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.556900][ T7892] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.558422][ T7892] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.560069][ T7892] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.564010][ T7892] netlink: 'syz.2.1116': attribute type 12 has an invalid length. [ 262.565664][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 265.149502][ T7919] IPVS: Error connecting to the multicast addr [ 265.417828][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'. [ 269.608610][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.610843][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.505085][ T8060] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 273.523764][ T8060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 273.528846][ T8060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1163'. [ 273.975089][ T8060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.991655][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.995384][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.017578][ T8060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.136169][ T8060] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 274.179785][ T8060] bond0 (unregistering): Released all slaves [ 274.822816][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'. [ 276.642184][ T8111] netlink: 'syz.2.1180': attribute type 10 has an invalid length. [ 276.695641][ T8111] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 276.809769][ T8111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.850914][ T8111] device bond_slave_0 entered promiscuous mode [ 276.852316][ T8111] device bond_slave_1 entered promiscuous mode [ 276.853468][ T8111] device syz_tun entered promiscuous mode [ 276.919088][ T8111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.922935][ T8111] bond2: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 276.926972][ T8111] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 276.930145][ T8111] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 277.263030][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 277.615297][ T8136] loop2: detected capacity change from 0 to 256 [ 277.633820][ T8136] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe906d648, utbl_chksum : 0xe619d30d) [ 277.652250][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.654230][ T8136] exFAT-fs (loop2): Filesystem has been set read-only [ 277.655861][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 0, err : -5) [ 277.659097][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.660562][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 0, err : -5) [ 277.662708][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.664095][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 1, err : -5) [ 277.666533][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.668867][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 2, err : -5) [ 277.670981][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.672540][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 3, err : -5) [ 277.674699][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.676141][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 4, err : -5) [ 277.678756][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.680103][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 5, err : -5) [ 277.682316][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.683745][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 6, err : -5) [ 277.685866][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.687235][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 7, err : -5) [ 277.692345][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.693765][ T8136] exFAT-fs (loop2): error, failed to bmap (inode : 0000000077989cf4 iblock : 0, err : -5) [ 277.695650][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.697085][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.707642][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.710639][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.719937][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.721456][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 277.820192][ T8136] exFAT-fs (loop2): error, broken FAT chain. [ 279.567033][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.587363][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.946305][ T8180] device bridge_slave_0 entered promiscuous mode [ 280.688342][ T8197] netlink: 'syz.4.1202': attribute type 21 has an invalid length. [ 280.690030][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1202'. [ 281.585473][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.587499][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.519407][ T8253] loop2: detected capacity change from 0 to 4096 [ 283.524484][ T8253] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 283.974963][ T8262] loop1: detected capacity change from 0 to 4096 [ 283.983148][ T8262] EXT4-fs: inline encryption not supported [ 283.991399][ T8262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.995013][ T8262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 283.997179][ T8262] System zones: 0-5 [ 284.000571][ T8262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.115865][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 285.144685][ T8278] loop4: detected capacity change from 0 to 64 [ 285.356816][ T8283] loop2: detected capacity change from 0 to 256 [ 285.648960][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.653800][ T5462] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.656411][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.345599][ T8307] loop1: detected capacity change from 0 to 256 [ 286.366477][ T8307] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7d61b883, utbl_chksum : 0xe619d30d) [ 288.362388][ T8347] futex_wake_op: syz.1.1256 tries to shift op by 144; fix this program [ 289.355750][ T8365] device syzkaller1 entered promiscuous mode [ 289.828707][ T8377] device syzkaller0 entered promiscuous mode [ 290.371255][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.373489][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.166157][ T8388] futex_wake_op: syz.1.1270 tries to shift op by 144; fix this program [ 293.025401][ T8428] SET target dimension over the limit! [ 293.683191][ T8439] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 294.859304][ T8439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.888717][ T8439] device macvlan2 entered promiscuous mode [ 294.902661][ T8439] device bond3 entered promiscuous mode [ 294.908022][ T8439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.912069][ T8439] team0: Port device macvlan2 added [ 295.020039][ T8439] bond3: (slave ip6gretap1): making interface the new active one [ 295.021753][ T8439] device ip6gretap1 entered promiscuous mode [ 295.024421][ T8439] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 295.041023][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.457434][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.462771][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 295.466243][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 296.828655][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.830988][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.050722][ T4477] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.517405][ T4477] usb 1-1: Using ep0 maxpacket: 32 [ 297.522803][ T4477] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 297.524526][ T4477] usb 1-1: config 0 has no interface number 0 [ 297.528149][ T4477] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 297.530594][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.532328][ T4477] usb 1-1: Product: syz [ 297.533248][ T4477] usb 1-1: Manufacturer: syz [ 297.534126][ T4477] usb 1-1: SerialNumber: syz [ 297.539238][ T4477] usb 1-1: config 0 descriptor?? [ 297.544602][ T4477] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 297.622346][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.626804][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.775623][ T4477] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 297.784389][ T4477] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 298.228900][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 298.230779][ T14] usb 1-1: USB disconnect, device number 11 [ 298.238261][ T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 298.252061][ T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 298.259829][ T14] quatech2 1-1:0.51: device disconnected [ 299.216289][ T8533] loop4: detected capacity change from 0 to 64 [ 299.227528][ T8533] hfs: unable to parse mount options [ 299.290333][ T8538] loop4: detected capacity change from 0 to 512 [ 299.297546][ T8538] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 299.299222][ T8538] UDF-fs: Scanning with blocksize 512 failed [ 299.303543][ T8538] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 299.307868][ T8538] UDF-fs: Scanning with blocksize 1024 failed [ 299.345305][ T8538] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 299.353059][ T8538] UDF-fs: Scanning with blocksize 2048 failed [ 299.355227][ T8538] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 299.379507][ T8538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.801095][ T8596] futex_wake_op: syz.0.1337 tries to shift op by 144; fix this program [ 305.692965][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 305.700528][ T8631] team0 (unregistering): Failed to send options change via netlink (err -105) [ 305.702595][ T8631] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 305.705022][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 307.706372][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.712846][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.477576][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 310.877630][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.885733][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.964267][ T8815] loop2: detected capacity change from 0 to 1024 [ 314.975495][ T8815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.030907][ T8815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 315.042897][ T8815] System zones: 0-1, 3-12 [ 315.045279][ T8815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.493424][ T8826] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 315.955398][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 316.657380][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.432731][ T4477] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 318.875231][ T4477] usb 1-1: unable to get BOS descriptor or descriptor too short [ 318.879743][ T4477] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.881764][ T4477] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.883488][ T4477] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 318.885612][ T4477] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 318.891471][ T4477] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 318.894637][ T4477] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.896528][ T4477] usb 1-1: config 1 interface 1 has no altsetting 0 [ 318.903347][ T4477] usb 1-1: string descriptor 0 read error: -22 [ 318.904613][ T4477] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 318.906360][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.922768][ T4477] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 318.941973][ T4477] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 318.965018][ T5407] udevd[5407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.443967][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.446658][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.354880][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 320.356946][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.358361][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.362400][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.363859][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.900380][ T8927] tipc: Started in network mode [ 320.901569][ T8927] tipc: Node identity d2d8b4939d4f, cluster identity 4711 [ 320.903516][ T8927] tipc: Enabled bearer , priority 0 [ 320.905496][ T8927] device syzkaller0 entered promiscuous mode [ 320.910176][ T8927] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 320.917215][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.919337][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.060901][ T8928] tipc: Resetting bearer [ 321.070553][ T8926] tipc: Resetting bearer [ 321.207425][ T8926] tipc: Disabling bearer [ 321.396548][ T8935] loop4: detected capacity change from 0 to 512 [ 321.713620][ T1966] usb 1-1: USB disconnect, device number 12 [ 321.767914][ T8935] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 321.771358][ T8935] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1439: corrupted in-inode xattr [ 321.777412][ T8935] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1439: couldn't read orphan inode 15 (err -117) [ 321.780350][ T8935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.852550][ T8942] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 321.854352][ T8942] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 321.881581][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 321.933685][ T8951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 321.935623][ T8951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 324.314403][ T7570] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 324.809746][ T8988] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.811757][ T8988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 324.814052][ T7570] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.817360][ T7570] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.819281][ T7570] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 324.821060][ T7570] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 324.822970][ T7570] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 324.829395][ T7570] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 324.831802][ T7570] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.833537][ T7570] usb 1-1: config 1 interface 1 has no altsetting 0 [ 324.839546][ T7570] usb 1-1: string descriptor 0 read error: -22 [ 324.840813][ T7570] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 324.842406][ T7570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.857134][ T7570] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 324.879699][ T7570] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 324.923207][ T5407] udevd[5407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.232813][ T8994] IPVS: stopping master sync thread 6537 ... [ 326.988431][ T1966] usb 1-1: USB disconnect, device number 13 [ 327.650831][ T1966] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 327.845833][ T1966] usb 1-1: Using ep0 maxpacket: 32 [ 327.849891][ T1966] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 327.851942][ T1966] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 327.854192][ T1966] usb 1-1: config 2 has no interface number 0 [ 327.855509][ T1966] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 327.858477][ T1966] usb 1-1: config 2 interface 88 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.861275][ T1966] usb 1-1: config 2 interface 88 has no altsetting 0 [ 327.865329][ T1966] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 327.867893][ T1966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 327.869950][ T1966] usb 1-1: Product: syz [ 327.870983][ T1966] usb 1-1: Manufacturer: syz [ 327.872004][ T1966] usb 1-1: SerialNumber: syz [ 327.882804][ T9041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.886093][ T1966] asix: probe of 1-1:2.88 failed with error -22 [ 327.898885][ T9052] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.901120][ T9052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 329.188417][ T9073] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 329.190692][ T9073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 329.577817][ T9089] overlayfs: missing 'lowerdir' [ 330.162578][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.166402][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.645863][ T24] usb 1-1: USB disconnect, device number 14 [ 331.091571][ T9108] loop4: detected capacity change from 0 to 1024 [ 331.577438][ T9114] loop2: detected capacity change from 0 to 32768 [ 331.619532][ T9116] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1499'. [ 332.349711][ T9114] read_mapping_page failed! [ 332.350930][ T9114] ERROR: (device loop2): txAbort: [ 332.350930][ T9114] [ 332.870264][ T9128] jfs_strtoUCS: char2uni returned -22. [ 332.871612][ T9128] charset = iso8859-3, char = 0xbe [ 333.119313][ T9124] overlayfs: missing 'lowerdir' [ 333.451660][ T9140] loop1: detected capacity change from 0 to 32768 [ 333.495805][ T9140] read_mapping_page failed! [ 333.496707][ T9140] ERROR: (device loop1): txAbort: [ 333.496707][ T9140] [ 333.506557][ T9147] loop2: detected capacity change from 0 to 512 [ 333.790612][ T9151] jfs_strtoUCS: char2uni returned -22. [ 333.791838][ T9151] charset = iso8859-3, char = 0xbe [ 333.836105][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.888091][ T9147] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.1507: corrupted inode contents [ 333.929387][ T9147] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 333.998679][ T9147] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.1507: corrupted inode contents [ 334.026931][ T9147] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.1507: mark_inode_dirty error [ 334.168474][ T9147] EXT4-fs (loop2): 1 orphan inode deleted [ 334.169805][ T9147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 334.195360][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 334.197484][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 334.199027][ T7] usb 1-1: can't read configurations, error -71 [ 335.393123][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 336.105019][ T9178] loop1: detected capacity change from 0 to 128 [ 336.113424][ T9178] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.136035][ T9178] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.763225][ T9180] loop4: detected capacity change from 0 to 128 [ 336.809284][ T9180] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.207375][ T9180] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.289279][ T9197] overlayfs: missing 'lowerdir' [ 340.044971][ T9210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.048217][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.049783][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.051341][ T9215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.987507][ T9225] loop4: detected capacity change from 0 to 128 [ 340.989477][ T9225] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.994627][ T9225] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.745064][ T9298] misc userio: Invalid payload size [ 345.746599][ T9298] misc userio: No port type given on /dev/userio [ 346.521151][ T9306] loop2: detected capacity change from 0 to 32768 [ 346.553318][ T9306] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 346.553318][ T9306] [ 346.556702][ T9306] ERROR: (device loop2): remounting filesystem as read-only [ 346.995295][ T92] blkno = 1580, nblocks = 1 [ 346.996429][ T92] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 346.996429][ T92] [ 350.228981][ T9369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 350.230327][ T9369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.246580][ T9369] vhci_hcd vhci_hcd.0: Device attached [ 350.527693][ T7570] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 350.691910][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.699574][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.720245][ T9376] loop2: detected capacity change from 0 to 8192 [ 350.748857][ T9376] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.356547][ T9370] vhci_hcd: connection reset by peer [ 351.635724][ T4763] vhci_hcd: stop threads [ 351.642681][ T4763] vhci_hcd: release socket [ 351.644411][ T4763] vhci_hcd: disconnect device [ 352.107857][ T9401] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 352.149593][ T9401] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 352.173653][ T9401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.068007][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.075227][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.978185][ T9448] netlink: 'syz.2.1589': attribute type 10 has an invalid length. [ 355.985902][ T9448] bond2: option mode: unable to set because the bond device has slaves [ 356.106746][ T7570] vhci_hcd: vhci_device speed not set [ 358.018305][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.021330][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.427755][ T9512] loop1: detected capacity change from 0 to 512 [ 360.717386][ T9512] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 360.719270][ T9512] EXT4-fs (loop1): DAX unsupported by block device. [ 361.617366][ T9536] loop4: detected capacity change from 0 to 16 [ 361.635938][ T9536] erofs: (device loop4): mounted with root inode @ nid 36. [ 362.814538][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.844001][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.130190][ T9554] loop2: detected capacity change from 0 to 16 [ 363.492327][ T9554] erofs: (device loop2): mounted with root inode @ nid 36. [ 364.875750][ T9585] loop2: detected capacity change from 0 to 512 [ 365.120697][ T9585] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 365.120736][ T9585] EXT4-fs (loop2): DAX unsupported by block device. [ 366.691242][ T9608] loop4: detected capacity change from 0 to 512 [ 367.239446][ T9608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 367.241100][ T9608] EXT4-fs (loop4): DAX unsupported by block device. [ 367.741830][ T9620] loop1: detected capacity change from 0 to 512 [ 367.751155][ T9620] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 367.752704][ T9620] EXT4-fs (loop1): DAX unsupported by block device. [ 368.061641][ T9144] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.172754][ T3899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 368.369445][ T3899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.372305][ T3899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.374407][ T3899] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 368.376278][ T3899] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 368.383094][ T3899] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 368.385664][ T3899] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 368.387759][ T3899] usb 1-1: config 1 interface 1 has no altsetting 0 [ 368.403832][ T3899] usb 1-1: string descriptor 0 read error: -22 [ 368.405155][ T3899] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 368.406961][ T3899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.667666][ T9635] loop4: detected capacity change from 0 to 16 [ 368.705487][ T3899] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 368.802911][ T9635] erofs: (device loop4): mounted with root inode @ nid 36. [ 370.251238][ T9651] loop1: detected capacity change from 0 to 8192 [ 370.257544][ T9651] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.421506][ T9648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 370.422852][ T9648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.424502][ T9648] vhci_hcd vhci_hcd.0: Device attached [ 370.586992][ T9650] vhci_hcd: connection closed [ 370.595746][ T4763] vhci_hcd: stop threads [ 370.597468][ T4763] vhci_hcd: release socket [ 370.598413][ T4763] vhci_hcd: disconnect device [ 370.675006][ T7] vhci_hcd: vhci_device speed not set [ 371.013036][ T3899] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 371.297245][ T3899] usb 1-1: USB disconnect, device number 17 [ 371.544455][ T9668] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 371.547160][ T9668] bond2: option mode: unable to set because the bond device has slaves [ 371.564061][ T9668] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 371.856398][ T9144] udevd[9144]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.212177][ T9701] loop1: detected capacity change from 0 to 512 [ 373.272889][ T9702] loop4: detected capacity change from 0 to 128 [ 373.274949][ T9702] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.483822][ T9701] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 373.486302][ T9701] EXT4-fs (loop1): DAX unsupported by block device. [ 373.515176][ T9702] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 374.443856][ T9144] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 376.187907][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.189767][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.329356][ T9724] loop2: detected capacity change from 0 to 32768 [ 377.235499][ T9741] loop2: detected capacity change from 0 to 512 [ 378.598917][ T9741] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 378.600697][ T9741] EXT4-fs (loop2): DAX unsupported by block device. [ 378.695467][ T9752] loop4: detected capacity change from 0 to 8192 [ 378.809773][ T9752] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.589849][ T9744] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 379.591153][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.592756][ T9744] vhci_hcd vhci_hcd.0: Device attached [ 379.594194][ T9749] vhci_hcd: connection closed [ 379.595903][ T4686] vhci_hcd: stop threads [ 379.597562][ T4686] vhci_hcd: release socket [ 379.598446][ T4686] vhci_hcd: disconnect device [ 380.537519][ T9767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 380.538794][ T9767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.540354][ T9767] vhci_hcd vhci_hcd.0: Device attached [ 380.577769][ T9767] loop4: detected capacity change from 0 to 8192 [ 380.583335][ T9767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.766882][ T9774] loop2: detected capacity change from 0 to 32768 [ 380.878527][ T4717] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 380.880346][ T9777] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 380.881542][ T9777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.883208][ T9777] vhci_hcd vhci_hcd.0: Device attached [ 381.233568][ T9785] jfs_strtoUCS: char2uni returned -22. [ 381.234859][ T9785] charset = iso8859-3, char = 0xbe [ 381.363721][ T9768] vhci_hcd: connection reset by peer [ 381.365181][ T215] vhci_hcd: stop threads [ 381.367399][ T215] vhci_hcd: release socket [ 381.368187][ T215] vhci_hcd: disconnect device [ 381.452819][ T9745] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 381.564374][ T9778] vhci_hcd: connection reset by peer [ 381.565606][ T4525] vhci_hcd: stop threads [ 381.579302][ T4525] vhci_hcd: release socket [ 381.580294][ T4525] vhci_hcd: disconnect device [ 381.945090][ T9792] loop2: detected capacity change from 0 to 32768 [ 382.222176][ T9796] jfs_strtoUCS: char2uni returned -22. [ 382.223328][ T9796] charset = iso8859-3, char = 0xbe [ 384.994110][ T9827] loop4: detected capacity change from 0 to 8192 [ 385.009610][ T9827] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.322064][ T9820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 385.323305][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.325922][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 385.328021][ T9822] vhci_hcd: connection closed [ 385.337900][ T4900] vhci_hcd: stop threads [ 385.339608][ T4900] vhci_hcd: release socket [ 385.340526][ T4900] vhci_hcd: disconnect device [ 386.732066][ T9845] netlink: 'syz.4.1694': attribute type 10 has an invalid length. [ 386.738847][ T4717] vhci_hcd: vhci_device speed not set [ 386.759469][ T9845] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 386.788373][ T9845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.812006][ T9845] device bond_slave_0 entered promiscuous mode [ 386.813367][ T9845] device bond_slave_1 entered promiscuous mode [ 386.815468][ T9845] device syz_tun entered promiscuous mode [ 386.822286][ T9845] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 386.827398][ T9845] bond4: (slave macvlan3): speed changed to 0 on port 1 [ 386.837921][ T9845] bond4: (slave macvlan3): Enslaving as a backup interface with an up link [ 386.857378][ T9848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 386.858677][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.878782][ T9848] vhci_hcd vhci_hcd.0: Device attached [ 386.903784][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 386.975461][ T9848] loop2: detected capacity change from 0 to 8192 [ 386.992939][ T9848] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.041889][ T9745] vhci_hcd: vhci_device speed not set [ 387.161099][ T9750] usb 6-1: new low-speed USB device number 3 using vhci_hcd [ 387.464748][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.466081][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.664683][ T9850] vhci_hcd: connection reset by peer [ 387.667904][ T1576] vhci_hcd: stop threads [ 387.668721][ T1576] vhci_hcd: release socket [ 387.669811][ T1576] vhci_hcd: disconnect device [ 390.214783][ T9895] loop4: detected capacity change from 0 to 128 [ 390.220803][ T9895] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.281040][ T9895] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.768771][ T9902] netlink: 'syz.1.1706': attribute type 10 has an invalid length. [ 391.771426][ T9902] bond0: option mode: unable to set because the bond device is up [ 392.083463][ T9912] loop4: detected capacity change from 0 to 8192 [ 392.111446][ T9912] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.443167][ T9908] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 392.444486][ T9908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.446195][ T9908] vhci_hcd vhci_hcd.0: Device attached [ 392.673437][ T9909] vhci_hcd: connection closed [ 392.673941][ T1576] vhci_hcd: stop threads [ 392.677935][ T1576] vhci_hcd: release socket [ 392.678904][ T1576] vhci_hcd: disconnect device [ 392.750375][ T9750] vhci_hcd: vhci_device speed not set [ 392.779837][ T7570] usb 10-1: new low-speed USB device number 3 using vhci_hcd [ 392.781286][ T7570] usb 10-1: enqueue for inactive port 0 [ 392.906411][ T7570] vhci_hcd: vhci_device speed not set [ 393.087638][ T9929] loop1: detected capacity change from 0 to 512 [ 393.111193][ T9929] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 393.112760][ T9929] EXT4-fs (loop1): DAX unsupported by block device. [ 393.348640][ T9144] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.328963][ T9942] loop1: detected capacity change from 0 to 128 [ 394.334475][ T9942] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.462640][ T9942] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.657146][ T9951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 395.658409][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.660864][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 395.990556][ T7] usb 2-1: new low-speed USB device number 3 using vhci_hcd [ 397.401845][ T9952] vhci_hcd: connection reset by peer [ 397.430917][ T5424] vhci_hcd: stop threads [ 397.431932][ T5424] vhci_hcd: release socket [ 397.432763][ T5424] vhci_hcd: disconnect device [ 398.389669][ T9984] loop4: detected capacity change from 0 to 512 [ 398.422540][ T9984] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 398.424392][ T9984] EXT4-fs (loop4): DAX unsupported by block device. [ 399.331959][ T9997] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 399.343750][ T9997] bond4: option mode: unable to set because the bond device has slaves [ 401.514130][ T7] vhci_hcd: vhci_device speed not set [ 401.951671][T10034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.966651][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.969892][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.622957][T10048] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 403.645358][T10048] bond2: option mode: unable to set because the bond device is up [ 403.652423][T10048] device bond_slave_0 entered promiscuous mode [ 403.653716][T10048] device bond_slave_1 entered promiscuous mode [ 403.656267][T10048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 403.688767][T10048] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 403.789915][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 405.808434][T10081] loop1: detected capacity change from 0 to 32768 [ 405.834040][T10081] read_mapping_page failed! [ 405.834976][T10081] ERROR: (device loop1): txAbort: [ 405.834976][T10081] [ 407.189058][T10087] jfs_strtoUCS: char2uni returned -22. [ 407.190237][T10087] charset = iso8859-3, char = 0xbe [ 408.053539][T10104] loop2: detected capacity change from 0 to 8192 [ 408.179265][T10104] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.340818][T10109] loop1: detected capacity change from 0 to 8192 [ 408.358538][T10109] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.668608][T10101] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 408.670021][T10101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.671853][T10101] vhci_hcd vhci_hcd.0: Device attached [ 408.890376][T10106] vhci_hcd: connection closed [ 408.890687][ T4385] vhci_hcd: stop threads [ 408.892476][ T4385] vhci_hcd: release socket [ 408.893387][ T4385] vhci_hcd: disconnect device [ 408.939137][T10105] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 408.940578][T10105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.942150][T10105] vhci_hcd vhci_hcd.0: Device attached [ 408.943533][T10107] vhci_hcd: connection closed [ 408.945617][ T7911] vhci_hcd: stop threads [ 408.947272][ T7911] vhci_hcd: release socket [ 408.948138][ T7911] vhci_hcd: disconnect device [ 408.965789][T10077] usb 6-1: new low-speed USB device number 4 using vhci_hcd [ 408.967335][T10077] usb 6-1: enqueue for inactive port 0 [ 409.052491][T10077] vhci_hcd: vhci_device speed not set [ 411.178450][T10141] loop4: detected capacity change from 0 to 32768 [ 411.400150][T10141] read_mapping_page failed! [ 411.401062][T10141] ERROR: (device loop4): txAbort: [ 411.401062][T10141] [ 412.227794][T10156] jfs_strtoUCS: char2uni returned -22. [ 412.230008][T10156] charset = iso8859-3, char = 0xbe [ 412.578191][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.595312][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.621993][T10158] loop1: detected capacity change from 0 to 512 [ 412.832131][T10164] loop4: detected capacity change from 0 to 512 [ 412.836799][T10164] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 412.838467][T10164] EXT4-fs (loop4): DAX unsupported by block device. [ 413.145446][T10158] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.1765: inode has invalid extent depth: 7 [ 413.187506][T10158] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 413.189702][T10158] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 413.198015][T10158] EXT4-fs (loop1): mount failed [ 413.448820][T10171] loop2: detected capacity change from 0 to 512 [ 413.558860][T10171] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 413.560672][T10171] EXT4-fs (loop2): DAX unsupported by block device. [ 413.745481][ T9144] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 414.695000][T10183] loop4: detected capacity change from 0 to 32768 [ 414.713830][T10183] read_mapping_page failed! [ 414.714734][T10183] ERROR: (device loop4): txAbort: [ 414.714734][T10183] [ 415.298997][T10191] jfs_strtoUCS: char2uni returned -22. [ 415.300416][T10191] charset = iso8859-3, char = 0xbe [ 416.078055][T10203] loop1: detected capacity change from 0 to 512 [ 416.215450][T10203] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 416.217160][T10203] EXT4-fs (loop1): DAX unsupported by block device. [ 418.607267][T10227] loop1: detected capacity change from 0 to 128 [ 418.608993][T10227] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.488610][T10227] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 421.067254][T10242] loop4: detected capacity change from 0 to 128 [ 421.068976][T10242] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.071423][T10242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 422.967387][T10265] loop1: detected capacity change from 0 to 512 [ 422.970686][T10265] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 422.972523][T10265] EXT4-fs (loop1): DAX unsupported by block device. [ 423.430583][T10278] loop2: detected capacity change from 0 to 16 [ 423.434676][T10278] erofs: (device loop2): mounted with root inode @ nid 36. [ 424.596221][ T22] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 425.127105][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.128711][ T22] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 425.130663][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.133769][ T22] usb 1-1: config 0 descriptor?? [ 426.000429][T10317] netlink: 'syz.1.1805': attribute type 10 has an invalid length. [ 426.006298][T10317] bond0: (slave macvlan2): Opening slave failed [ 426.316235][T10328] loop1: detected capacity change from 0 to 16 [ 426.573885][T10328] erofs: (device loop1): mounted with root inode @ nid 36. [ 426.979416][T10333] loop2: detected capacity change from 0 to 8192 [ 427.093880][T10333] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.305819][T10329] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 427.307278][T10329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.308998][T10329] vhci_hcd vhci_hcd.0: Device attached [ 427.436770][T10330] vhci_hcd: connection closed [ 427.437270][ T9] vhci_hcd: stop threads [ 427.439104][ T9] vhci_hcd: release socket [ 427.439996][ T9] vhci_hcd: disconnect device [ 428.390475][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 428.391895][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 428.396024][ T22] usb 1-1: USB disconnect, device number 18 [ 429.526633][T10360] loop2: detected capacity change from 0 to 128 [ 429.528856][T10360] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.642920][T10360] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 431.405039][T10384] loop4: detected capacity change from 0 to 512 [ 431.407190][T10383] loop1: detected capacity change from 0 to 512 [ 431.414381][T10384] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 431.416162][T10384] EXT4-fs (loop4): DAX unsupported by block device. [ 431.417208][T10383] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 431.418983][T10383] EXT4-fs (loop1): DAX unsupported by block device. [ 431.953436][ T5407] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.969838][ T9144] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.859756][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.927869][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.935418][T10402] loop1: detected capacity change from 0 to 512 [ 432.968965][T10402] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.1826: inode has invalid extent depth: 7 [ 432.971884][T10402] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 432.973664][T10402] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 432.977047][T10402] EXT4-fs (loop1): mount failed [ 434.166951][T10431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.169711][T10431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.230395][T10431] loop2: detected capacity change from 0 to 512 [ 434.337705][T10431] EXT4-fs error (device loop2): ext4_find_extent:900: inode #4: comm syz.2.1834: inode has invalid extent depth: 7 [ 434.341012][T10431] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 434.342988][T10431] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 434.346640][T10431] EXT4-fs (loop2): mount failed [ 435.732358][T10441] loop4: detected capacity change from 0 to 16 [ 435.980448][T10441] erofs: (device loop4): mounted with root inode @ nid 36. [ 437.712954][T10461] loop4: detected capacity change from 0 to 32768 [ 437.771109][T10461] read_mapping_page failed! [ 437.772145][T10461] ERROR: (device loop4): txAbort: [ 437.772145][T10461] [ 438.156203][T10466] jfs_strtoUCS: char2uni returned -22. [ 438.157693][T10466] charset = iso8859-3, char = 0xbe [ 438.401206][T10469] netlink: 'syz.1.1844': attribute type 10 has an invalid length. [ 438.420362][T10469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.512326][T10469] bond0: (slave macvlan2): Opening slave failed [ 438.955435][T10480] loop2: detected capacity change from 0 to 128 [ 438.957472][T10480] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.409815][T10480] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 465.919635][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [syz.3.1847:10490] [ 465.921407][ C0] Modules linked in: [ 465.922285][ C0] irq event stamp: 18772 [ 465.923165][ C0] hardirqs last enabled at (18771): [] exit_to_kernel_mode+0xcc/0xfc [ 465.925149][ C0] hardirqs last disabled at (18772): [] el1_interrupt+0x24/0x54 [ 465.927007][ C0] softirqs last enabled at (566): [] handle_softirqs+0xaec/0xc60 [ 465.928967][ C0] softirqs last disabled at (489): [] __do_softirq+0x14/0x20 [ 465.930777][ C0] CPU: 0 PID: 10490 Comm: syz.3.1847 Not tainted syzkaller #0 [ 465.932302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.934301][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 465.935837][ C0] pc : smp_call_function_many_cond+0x1358/0x142c [ 465.937108][ C0] lr : smp_call_function_many_cond+0x1370/0x142c [ 465.938382][ C0] sp : ffff800021cc76b0 [ 465.939222][ C0] x29: ffff800021cc7710 x28: 0000000000000001 x27: ffff80001523d000 [ 465.940854][ C0] x26: 0000000000000011 x25: ffff800015240f40 x24: ffff00019f5101c0 [ 465.942478][ C0] x23: 1fffe00033ea2038 x22: dfff800000000000 x21: ffff00019f535a08 [ 465.943908][ C0] x20: 0000000000000001 x19: ffff80001543a760 x18: 000000003176f569 [ 465.945423][ C0] x17: 0000000026cb2660 x16: ffff800011a529a8 x15: 00004c4b40000000 [ 465.946956][ C0] x14: 0000000000000001 x13: 1fffe00033ea6b41 x12: 0000000000080000 [ 465.948541][ C0] x11: 000000000007ffff x10: ffff800027f09000 x9 : 0000000000000000 [ 465.950149][ C0] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 465.951714][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008409674 [ 465.953292][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 465.954958][ C0] Call trace: [ 465.955632][ C0] smp_call_function_many_cond+0x1358/0x142c [ 465.956867][ C0] smp_call_function_many+0x40/0x54 [ 465.957903][ C0] clock_was_set+0x6f0/0x7f4 [ 465.958832][ C0] timekeeping_inject_offset+0x4f0/0x5a0 [ 465.959970][ C0] do_adjtimex+0x430/0x8ec [ 465.960835][ C0] posix_clock_realtime_adj+0x20/0x30 [ 465.961866][ C0] __arm64_sys_clock_adjtime+0x29c/0x468 [ 465.962986][ C0] invoke_syscall+0x98/0x290 [ 465.963926][ C0] el0_svc_common+0x138/0x258 [ 465.964886][ C0] do_el0_svc+0x58/0x130 [ 465.965736][ C0] el0_svc+0x58/0x128 [ 465.966508][ C0] el0t_64_sync_handler+0x84/0xf0 [ 465.967493][ C0] el0t_64_sync+0x18c/0x190 [ 465.968341][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 465.969566][ C0] CPU: 0 PID: 10490 Comm: syz.3.1847 Tainted: G L syzkaller #0 [ 465.971333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.973250][ C0] Call trace: [ 465.973869][ C0] dump_backtrace+0x1c0/0x1ec [ 465.974695][ C0] show_stack+0x2c/0x3c [ 465.975503][ C0] __dump_stack+0x30/0x40 [ 465.976317][ C0] dump_stack_lvl+0xf4/0x15c [ 465.977150][ C0] dump_stack+0x1c/0x5c [ 465.977911][ C0] panic+0x2f8/0x7ac [ 465.978628][ C0] softlockup_fn+0x0/0x120 [ 465.979403][ C0] __hrtimer_run_queues+0x408/0xc40 [ 465.980376][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 465.981354][ C0] arch_timer_handler_virt+0x74/0x88 [ 465.982377][ C0] handle_percpu_devid_irq+0x174/0x34c [ 465.983479][ C0] generic_handle_domain_irq+0xe0/0x140 [ 465.984517][ C0] gic_handle_irq+0x70/0x1d8 [ 465.985381][ C0] call_on_irq_stack+0x30/0x48 [ 465.986259][ C0] do_interrupt_handler+0xd4/0x138 [ 465.987261][ C0] el1_interrupt+0x34/0x54 [ 465.988088][ C0] el1h_64_irq_handler+0x18/0x24 [ 465.988991][ C0] el1h_64_irq+0x64/0x68 [ 465.989790][ C0] smp_call_function_many_cond+0x1358/0x142c [ 465.990952][ C0] smp_call_function_many+0x40/0x54 [ 465.991975][ C0] clock_was_set+0x6f0/0x7f4 [ 465.992861][ C0] timekeeping_inject_offset+0x4f0/0x5a0 [ 465.993952][ C0] do_adjtimex+0x430/0x8ec [ 465.994864][ C0] posix_clock_realtime_adj+0x20/0x30 [ 465.995933][ C0] __arm64_sys_clock_adjtime+0x29c/0x468 [ 465.997066][ C0] invoke_syscall+0x98/0x290 [ 465.997991][ C0] el0_svc_common+0x138/0x258 [ 465.998918][ C0] do_el0_svc+0x58/0x130 [ 465.999753][ C0] el0_svc+0x58/0x128 [ 466.000523][ C0] el0t_64_sync_handler+0x84/0xf0 [ 466.001522][ C0] el0t_64_sync+0x18c/0x190 [ 466.002402][ C0] SMP: stopping secondary CPUs [ 467.091864][ C0] SMP: failed to stop secondary CPUs 0-1 [ 467.092874][ C0] Kernel Offset: disabled [ 467.093622][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 467.094659][ C0] Memory Limit: none [ 467.106057][ C0] [ 467.106536][ C0] ================================ [ 467.107549][ C0] WARNING: inconsistent lock state [ 467.108529][ C0] syzkaller #0 Tainted: G L [ 467.109680][ C0] -------------------------------- [ 467.110703][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 467.112004][ C0] syz.3.1847/10490 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 467.113260][ C0] ffff8000152814b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 467.115318][ C0] {HARDIRQ-ON-W} state was registered at: [ 467.116431][ C0] lock_acquire+0x20c/0x63c [ 467.117302][ C0] _raw_spin_lock+0x54/0x6c [ 467.118164][ C0] efi_call_rts+0x3c8/0x9d8 [ 467.119040][ C0] process_one_work+0x7f8/0x13a4 [ 467.120035][ C0] worker_thread+0x8c4/0xfec [ 467.120941][ C0] kthread+0x250/0x2d8 [ 467.121767][ C0] ret_from_fork+0x10/0x20 [ 467.122711][ C0] irq event stamp: 18772 [ 467.123582][ C0] hardirqs last enabled at (18771): [] exit_to_kernel_mode+0xcc/0xfc [ 467.125549][ C0] hardirqs last disabled at (18772): [] el1_interrupt+0x24/0x54 [ 467.127468][ C0] softirqs last enabled at (566): [] handle_softirqs+0xaec/0xc60 [ 467.129350][ C0] softirqs last disabled at (489): [] __do_softirq+0x14/0x20 [ 467.131070][ C0] [ 467.131070][ C0] other info that might help us debug this: [ 467.132553][ C0] Possible unsafe locking scenario: [ 467.132553][ C0] [ 467.134007][ C0] CPU0 [ 467.134638][ C0] ---- [ 467.135267][ C0] lock(efi_rt_lock); [ 467.136000][ C0] [ 467.136652][ C0] lock(efi_rt_lock); [ 467.137453][ C0] [ 467.137453][ C0] *** DEADLOCK *** [ 467.137453][ C0] [ 467.138972][ C0] 3 locks held by syz.3.1847/10490: [ 467.140011][ C0] #0: ffff8000152b7010 (cpu_hotplug_lock){++++}-{0:0}, at: clock_was_set+0x154/0x7f4 [ 467.141855][ C0] #1: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 467.143744][ C0] #2: ffff8000172ee908 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 467.145521][ C0] [ 467.145521][ C0] stack backtrace: [ 467.146566][ C0] CPU: 0 PID: 10490 Comm: syz.3.1847 Tainted: G L syzkaller #0 [ 467.148294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.150277][ C0] Call trace: [ 467.150878][ C0] dump_backtrace+0x1c0/0x1ec [ 467.151746][ C0] show_stack+0x2c/0x3c [ 467.152487][ C0] __dump_stack+0x30/0x40 [ 467.153258][ C0] dump_stack_lvl+0xf4/0x15c [ 467.154067][ C0] dump_stack+0x1c/0x5c [ 467.154821][ C0] print_usage_bug+0x4c0/0x6d8 [ 467.155729][ C0] mark_lock_irq+0x850/0xab0 [ 467.156608][ C0] mark_lock+0x224/0x320 [ 467.157405][ C0] __lock_acquire+0xa4c/0x6800 [ 467.158329][ C0] lock_acquire+0x20c/0x63c [ 467.159208][ C0] _raw_spin_lock+0x54/0x6c [ 467.160128][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 467.161368][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 467.162492][ C0] efi_pstore_write+0x298/0x39c [ 467.163459][ C0] pstore_dump+0x5b0/0x820 [ 467.164308][ C0] kmsg_dump+0x170/0x260 [ 467.165128][ C0] panic+0x384/0x7ac [ 467.165839][ C0] softlockup_fn+0x0/0x120 [ 467.166686][ C0] __hrtimer_run_queues+0x408/0xc40 [ 467.167722][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 467.168659][ C0] arch_timer_handler_virt+0x74/0x88 [ 467.169667][ C0] handle_percpu_devid_irq+0x174/0x34c [ 467.170720][ C0] generic_handle_domain_irq+0xe0/0x140 [ 467.171795][ C0] gic_handle_irq+0x70/0x1d8 [ 467.172620][ C0] call_on_irq_stack+0x30/0x48 [ 467.173483][ C0] do_interrupt_handler+0xd4/0x138 [ 467.174409][ C0] el1_interrupt+0x34/0x54 [ 467.175219][ C0] el1h_64_irq_handler+0x18/0x24 [ 467.176128][ C0] el1h_64_irq+0x64/0x68 [ 467.176899][ C0] smp_call_function_many_cond+0x1358/0x142c [ 467.178011][ C0] smp_call_function_many+0x40/0x54 [ 467.178982][ C0] clock_was_set+0x6f0/0x7f4 [ 467.179813][ C0] timekeeping_inject_offset+0x4f0/0x5a0 [ 467.180903][ C0] do_adjtimex+0x430/0x8ec [ 467.181753][ C0] posix_clock_realtime_adj+0x20/0x30 [ 467.182739][ C0] __arm64_sys_clock_adjtime+0x29c/0x468 [ 467.183771][ C0] invoke_syscall+0x98/0x290 [ 467.184592][ C0] el0_svc_common+0x138/0x258 [ 467.185442][ C0] do_el0_svc+0x58/0x130 [ 467.186211][ C0] el0_svc+0x58/0x128 [ 467.186932][ C0] el0t_64_sync_handler+0x84/0xf0 [ 467.187947][ C0] el0t_64_sync+0x18c/0x190 [ 467.396101][ C0] Rebooting in 86400 seconds..