last executing test programs: 4.72820852s ago: executing program 2 (id=824): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x5152, 0x0, 0x0, 0x0, 0x132, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0xfffd, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x20020600) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs(0x0, 0x0) getdents64(r9, 0xffffffffffffffff, 0x43) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 4.043912952s ago: executing program 0 (id=833): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.559978627s ago: executing program 2 (id=836): unshare(0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x3, 0x0, 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) semget(0x2, 0x0, 0x366) 3.504571069s ago: executing program 1 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 3.094101782s ago: executing program 0 (id=840): landlock_create_ruleset(0x0, 0x0, 0x4db01adc91f176a0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x2, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x1, 0x0, 0x3, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x99, 0x23b) socket(0x1e, 0x4, 0x0) io_setup(0x6, &(0x7f0000000540)) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 2.325366966s ago: executing program 2 (id=842): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.260030639s ago: executing program 1 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x4}}, 0x28) 2.259801019s ago: executing program 3 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff0200"/52], 0x340a) 2.161113372s ago: executing program 0 (id=845): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9210000000000400080013", @ANYRES32=0x0, @ANYBLOB="08002e000400000040001980140005007da8691e234232d8dab4d3c3d950294c14000500a1b8b1f3f92a57a4f3fdf80ac0d9ad47140004005b1f8b30876fac3c90d9e206b034a83c"], 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) keyctl$clear(0x7, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.010972056s ago: executing program 3 (id=847): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) ftruncate(r0, 0x8008976) truncate(&(0x7f0000000940)='./file2\x00', 0x8) 1.58800709s ago: executing program 4 (id=848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0xc0000, 0x0) syz_usb_connect(0x0, 0xa8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100102cd9310f0030121a87e01020301090296"], 0x0) socket$unix(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1.58774867s ago: executing program 3 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) 1.481188893s ago: executing program 2 (id=850): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1.168625403s ago: executing program 0 (id=851): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x4, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.115991745s ago: executing program 1 (id=852): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x1008, 0x3, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x7, 0xcb, 0xa, 0x9, "eacb5a2e"}, 0x8, 0x4, {0x0}, 0x80000}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5"], 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b0000000000002000", 0x15) 1.115800705s ago: executing program 0 (id=853): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.115645025s ago: executing program 2 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 790.844486ms ago: executing program 4 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) 769.501526ms ago: executing program 4 (id=856): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)={0x40}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000980)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 667.956439ms ago: executing program 3 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff0200"/52], 0x340a) 667.604479ms ago: executing program 0 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf250f000000100007800c0003000100000000003200"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000600)={0x1}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x2, &(0x7f0000000180)="c2fb"}], 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) unshare(0x6020400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4623, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) 519.018414ms ago: executing program 3 (id=859): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x234e}}, 0x14}}, 0x800) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000940)=0x200000000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x7f, 0x4, 0x100, 0x2}, 0x3, 0x81, 0x0, 0x7, 0x0, 0x10}}) 492.431525ms ago: executing program 3 (id=860): socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r1, r1, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 343.999959ms ago: executing program 1 (id=861): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffc) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000000)=0x1e, 0x4) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 157.788405ms ago: executing program 1 (id=862): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 148.681036ms ago: executing program 2 (id=863): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) r4 = accept(r1, 0x0, &(0x7f00000000c0)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 100.031677ms ago: executing program 4 (id=864): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f00000000c0)=0x2, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 92.298257ms ago: executing program 1 (id=865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='yeah', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 63.246169ms ago: executing program 4 (id=866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) 0s ago: executing program 4 (id=867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0xc0000, 0x0) syz_usb_connect(0x0, 0xa8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100102cd9310f0030121a87e01020301090296"], 0x0) socket$unix(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) kernel console output (not intermixed with test programs): c 0x0c38 length: 249 > 2 [ 58.974027][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.977738][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.979429][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.981140][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.982488][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.984283][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.986462][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.987599][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.988882][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.997218][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.001550][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.002844][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.052344][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 59.097317][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 59.117587][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.118853][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.120831][ T4278] device bridge_slave_0 entered promiscuous mode [ 59.135791][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.137223][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.138785][ T4278] device bridge_slave_1 entered promiscuous mode [ 59.148479][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 59.154841][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.171035][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 59.173982][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.188852][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.190603][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.192096][ T4282] device bridge_slave_0 entered promiscuous mode [ 59.196779][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.198032][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.199597][ T4282] device bridge_slave_1 entered promiscuous mode [ 59.201515][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 59.204597][ T4278] team0: Port device team_slave_0 added [ 59.216337][ T4278] team0: Port device team_slave_1 added [ 59.228826][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.230538][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.232140][ T4287] device bridge_slave_0 entered promiscuous mode [ 59.235890][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.244724][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.245819][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.247266][ T4287] device bridge_slave_1 entered promiscuous mode [ 59.249262][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.252696][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.253870][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.255435][ T4289] device bridge_slave_0 entered promiscuous mode [ 59.257797][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.258919][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.263239][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.271640][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.272920][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.274409][ T4289] device bridge_slave_1 entered promiscuous mode [ 59.277780][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.278943][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.280599][ T4283] device bridge_slave_0 entered promiscuous mode [ 59.282617][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.283694][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.287575][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.293446][ T4282] team0: Port device team_slave_0 added [ 59.296784][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.297953][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.299478][ T4283] device bridge_slave_1 entered promiscuous mode [ 59.307265][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.309380][ T4282] team0: Port device team_slave_1 added [ 59.313558][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.315881][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.318548][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.326609][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.327726][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.332287][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.334651][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.335706][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.339563][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.342721][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.348765][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.360471][ T4283] team0: Port device team_slave_0 added [ 59.362615][ T4283] team0: Port device team_slave_1 added [ 59.364463][ T4287] team0: Port device team_slave_0 added [ 59.375791][ T4287] team0: Port device team_slave_1 added [ 59.422800][ T4278] device hsr_slave_0 entered promiscuous mode [ 59.470130][ T4278] device hsr_slave_1 entered promiscuous mode [ 59.522255][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.523465][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.527807][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.530970][ T4289] team0: Port device team_slave_0 added [ 59.532938][ T4289] team0: Port device team_slave_1 added [ 59.539703][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.541033][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.545272][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.600863][ T4282] device hsr_slave_0 entered promiscuous mode [ 59.639981][ T4282] device hsr_slave_1 entered promiscuous mode [ 59.689837][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.691141][ T4282] Cannot create hsr debugfs directory [ 59.700246][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.701395][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.705613][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.708021][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.709090][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.713998][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.721167][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.722308][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.726396][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.728851][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.732660][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.736871][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.790760][ T4283] device hsr_slave_0 entered promiscuous mode [ 59.830145][ T4283] device hsr_slave_1 entered promiscuous mode [ 59.869822][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.871046][ T4283] Cannot create hsr debugfs directory [ 59.930792][ T4287] device hsr_slave_0 entered promiscuous mode [ 59.970033][ T4287] device hsr_slave_1 entered promiscuous mode [ 60.009876][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.011140][ T4287] Cannot create hsr debugfs directory [ 60.061125][ T4289] device hsr_slave_0 entered promiscuous mode [ 60.100084][ T4289] device hsr_slave_1 entered promiscuous mode [ 60.139863][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.141107][ T4289] Cannot create hsr debugfs directory [ 60.246171][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.294529][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.334405][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.386651][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.430426][ T4282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.470846][ T4282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.510979][ T4282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.554098][ T4282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.619632][ T4289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.656062][ T4289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.693999][ T4289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.751765][ T4289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.806422][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.841082][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.881067][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.922144][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.961789][ T4287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.970231][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 60.994226][ T4287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.039861][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 61.040991][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 61.042032][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 61.044212][ T4287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.049996][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 61.091735][ T4287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.140526][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.157372][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.159376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.164233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.176162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.178039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.179512][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.180640][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.182822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.196382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.198041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.199542][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.200758][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.212835][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.218598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.223963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.226998][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.233985][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.235867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.237575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.239491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.251963][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.254553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.256236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.258095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.259516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.263787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.265216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.266613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.267996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.271822][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.274438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.275914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.277809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.279232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.281985][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.283146][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.288158][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.291381][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.293330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.294750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.296195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.298420][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.301559][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.305932][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.315797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.317273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.318632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.321754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.323215][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.324375][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.325804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.327368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.328896][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.330058][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.332883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.334441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.335980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.337431][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.338564][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.340949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.342463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.343950][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.345097][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.346546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.348197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.349705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.351609][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.352740][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.354140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.355637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.361170][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.363187][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.364817][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.366511][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.368067][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.370738][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.379059][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.381795][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.386215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.387737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.389629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.392592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.394645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.396323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.397837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.399235][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.400398][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.402746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.420038][ T4289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.421665][ T4289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.424630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.425996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.427294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.429277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.436365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.437986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.439546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.441524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.443022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.444672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.446269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.447777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.449339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.453034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.454568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.456195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.457636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.459154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.461035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.462752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.464851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.466362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.468066][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.469219][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.475279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.476782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.491618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.493051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.498861][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.511182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.513056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.517778][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.519681][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.526414][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.529725][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.540670][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.542303][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.549601][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.551567][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.554735][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.556259][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.569573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.571600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.574233][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.585851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.587113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.604782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.606118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.616775][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.618882][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.621126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.622720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.624654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.626114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.628400][ T4278] device veth0_vlan entered promiscuous mode [ 61.647956][ T4278] device veth1_vlan entered promiscuous mode [ 61.661538][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.664541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.666083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.667653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.669190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.671089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.685284][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.686887][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.688748][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.691057][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.692573][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.696762][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.698075][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.705719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.707356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.708955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.710645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.716108][ T4282] device veth0_vlan entered promiscuous mode [ 61.719657][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.725401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.727002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.730952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.732441][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.734881][ T4282] device veth1_vlan entered promiscuous mode [ 61.738422][ T4289] device veth0_vlan entered promiscuous mode [ 61.743643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.745324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.746807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.748332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.751789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.756613][ T4278] device veth0_macvtap entered promiscuous mode [ 61.758943][ T4278] device veth1_macvtap entered promiscuous mode [ 61.771633][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.773194][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.774779][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.776284][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.777676][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.781129][ T4287] device veth0_vlan entered promiscuous mode [ 61.787436][ T4287] device veth1_vlan entered promiscuous mode [ 61.789438][ T4289] device veth1_vlan entered promiscuous mode [ 61.797502][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.799133][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.801515][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.803065][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.804636][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.808950][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.811906][ T4282] device veth0_macvtap entered promiscuous mode [ 61.814436][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.815946][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.817387][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.818886][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.826560][ T4282] device veth1_macvtap entered promiscuous mode [ 61.830378][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.832208][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.833770][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.835281][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.848982][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.851233][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.852668][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.853964][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.857847][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.859456][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.866556][ T4289] device veth0_macvtap entered promiscuous mode [ 61.869040][ T4289] device veth1_macvtap entered promiscuous mode [ 61.871728][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.873263][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.874660][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.876205][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.886589][ T4287] device veth0_macvtap entered promiscuous mode [ 61.888722][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.890719][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.892966][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.894157][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.895779][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.897497][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.913597][ T4287] device veth1_macvtap entered promiscuous mode [ 61.914953][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.916384][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.917890][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.921823][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.923525][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.925700][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.927127][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.928824][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.931653][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.933412][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.935671][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.943774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.945537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.947137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.948650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.958026][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.959527][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.961801][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.963138][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.967487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.969660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.972660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.974254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.979564][ T4283] device veth0_vlan entered promiscuous mode [ 61.983549][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.985249][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.986730][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.988302][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.991082][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.998797][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.000406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.002883][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.004548][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.006022][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.008851][ T4283] device veth1_vlan entered promiscuous mode [ 62.023421][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.025158][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.026674][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.028279][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.033503][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.035213][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.037620][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.039396][ T4289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.041391][ T4289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.042680][ T4289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044089][ T4289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.053298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.054888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.056323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.057958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.064153][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.066140][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.067745][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.069425][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.073693][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.075229][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.077420][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.083848][ T4287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.084012][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.085389][ T4287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.086773][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.088136][ T4287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.091333][ T4287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.093474][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.095100][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.096738][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.114866][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.116484][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.135290][ T1588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.136561][ T1588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.137171][ T4283] device veth0_macvtap entered promiscuous mode [ 62.141206][ T1588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.142484][ T1588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.145070][ T4283] device veth1_macvtap entered promiscuous mode [ 62.147026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.148536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.151020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.152612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.195366][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.197134][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.198098][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.199921][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.208730][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.214334][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.215853][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.217486][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.219136][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.221379][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.223733][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.225365][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.226898][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.228577][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.243111][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.244310][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.245971][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.248954][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.253311][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.255027][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.256748][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.258322][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.260415][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.261967][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.263709][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.266728][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.272714][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.274531][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.277333][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.278536][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.282695][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.284475][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.285856][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.287367][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.291055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.309929][ T1588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.311167][ T1588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.312473][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.324548][ T27] audit: type=1326 audit(62.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d77a28 code=0x0 [ 62.378945][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.380368][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.381879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.392636][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.394021][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.395539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.119936][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 63.127435][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 63.128977][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 63.129007][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 63.130052][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 63.133246][ T4367] netlink: 'syz.2.3': attribute type 40 has an invalid length. [ 63.817815][ T4375] Set syz0 is full, maxelem 0 reached [ 65.048793][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.049919][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.202629][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 65.203094][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 65.203231][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 65.838204][ T4398] loop2: detected capacity change from 0 to 512 [ 65.889298][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 65.890514][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 66.378325][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.10: inode has both inline data and extents flags [ 66.381985][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.10: couldn't read orphan inode 15 (err -117) [ 66.384309][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.107529][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 67.837635][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 67.838064][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 67.839836][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 67.929342][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 68.011732][ T4420] loop3: detected capacity change from 0 to 64 [ 68.038937][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 68.083251][ T4422] device syzkaller0 entered promiscuous mode [ 68.209430][ T4430] loop0: detected capacity change from 0 to 512 [ 68.487709][ T4430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.504471][ T4430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.517384][ T4430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 68.519176][ T4430] System zones: 1-12 [ 68.525318][ T4430] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.528138][ T4430] EXT4-fs (loop0): 1 truncate cleaned up [ 68.529326][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.585402][ T4407] loop4: detected capacity change from 0 to 32768 [ 68.636842][ T4407] XFS (loop4): Mounting V5 Filesystem [ 68.658137][ T4407] XFS (loop4): Ending clean mount [ 69.070004][ T4283] XFS (loop4): Unmounting Filesystem [ 69.127057][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 69.594964][ T89] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.601046][ T14] cfg80211: failed to load regulatory.db [ 69.651744][ T4450] loop0: detected capacity change from 0 to 32768 [ 69.663592][ T4450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.23 (4450) [ 69.695907][ T4450] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.697821][ T4450] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 69.699245][ T4450] BTRFS info (device loop0): force clearing of disk cache [ 69.700639][ T4450] BTRFS info (device loop0): allowing degraded mounts [ 69.701830][ T4450] BTRFS info (device loop0): enabling auto defrag [ 69.702927][ T4450] BTRFS info (device loop0): enabling ssd optimizations [ 69.704263][ T4450] BTRFS info (device loop0): using spread ssd allocation scheme [ 69.705658][ T4450] BTRFS info (device loop0): using free space tree [ 69.841694][ T4450] BTRFS info (device loop0): rebuilding free space tree [ 69.849563][ T4475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 69.929568][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.022895][ T4270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4270) [ 70.326187][ T4505] loop0: detected capacity change from 0 to 4096 [ 70.461305][ T4505] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (142c0) [ 71.599843][ T4281] Bluetooth: hci5: command 0xfc11 tx timeout [ 71.599871][ T4279] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 71.607599][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 71.611860][ T4578] device erspan1 entered promiscuous mode [ 71.631775][ T4578] binder: 4577:4578 tried to acquire reference to desc 0, got 1 instead [ 71.633731][ T4578] binder: 4577:4578 got transaction with invalid data ptr [ 71.634935][ T4578] binder: 4577:4578 transaction call to 4577:0 failed 5/29201/-14, size 0-12288 line 3333 [ 71.891759][ T4581] loop3: detected capacity change from 0 to 256 [ 71.893553][ T4581] exfat: Deprecated parameter 'namecase' [ 71.948965][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.960619][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.080732][ T4581] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 72.155751][ T4578] syz.4.29 (4578): drop_caches: 2 [ 72.181038][ T4578] syz.4.29 (4578): drop_caches: 2 [ 72.211632][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.235069][ T4592] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 74.248833][ T4614] loop1: detected capacity change from 0 to 32768 [ 74.258547][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 74.260557][ T4617] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 74.263238][ T4614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.41 (4614) [ 74.271551][ T4614] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.273492][ T4614] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 74.275166][ T4614] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 74.277053][ T4614] BTRFS info (device loop1): trying to use backup root at mount time [ 74.278485][ T4614] BTRFS info (device loop1): setting nodatasum [ 74.279585][ T4614] BTRFS info (device loop1): force zlib compression, level 3 [ 74.280939][ T4614] BTRFS info (device loop1): turning on flush-on-commit [ 74.282208][ T4614] BTRFS info (device loop1): max_inline at 9 [ 74.283221][ T4614] BTRFS info (device loop1): disabling tree log [ 74.284280][ T4614] BTRFS info (device loop1): using free space tree [ 74.351113][ T4614] BTRFS info (device loop1): enabling ssd optimizations [ 74.856576][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.857977][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.955882][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.979640][ T4656] loop0: detected capacity change from 0 to 2048 [ 74.988651][ T4656] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 74.994662][ T4656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.391925][ T4382] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.420817][ T4656] UDF-fs: bad mount option "gad" or missing value [ 76.134196][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.137410][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.430462][ T4495] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.645220][ T4679] loop1: detected capacity change from 0 to 32768 [ 76.647301][ T4679] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 76.679001][ T4270] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 76.729953][ T4495] usb 1-1: Using ep0 maxpacket: 8 [ 76.737806][ T4495] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 76.740153][ T4495] usb 1-1: config 179 has no interface number 0 [ 76.741263][ T4495] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 76.743079][ T4495] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 76.747256][ T4495] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 76.749218][ T4495] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 76.764010][ T4495] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.810497][ T4495] usb 1-1: config 179 interface 65 has no altsetting 0 [ 76.811897][ T4495] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 76.813438][ T4495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.089628][ T4495] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input2 [ 77.178488][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 77.187904][ T4687] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 77.359850][ T47] Bluetooth: hci5: command 0xfc11 tx timeout [ 77.380010][ T4279] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 77.641353][ T24] usb 1-1: USB disconnect, device number 2 [ 77.641380][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.643868][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 77.695501][ T4695] loop1: detected capacity change from 0 to 64 [ 78.164593][ T4697] loop4: detected capacity change from 0 to 32768 [ 78.173078][ T4697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.57 (4697) [ 78.176320][ T4697] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.177923][ T4697] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 78.179295][ T4697] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 78.181120][ T4697] BTRFS info (device loop4): trying to use backup root at mount time [ 78.182366][ T4697] BTRFS info (device loop4): setting nodatasum [ 78.183373][ T4697] BTRFS info (device loop4): force zlib compression, level 3 [ 78.184544][ T4697] BTRFS info (device loop4): turning on flush-on-commit [ 78.185744][ T4697] BTRFS info (device loop4): max_inline at 9 [ 78.186757][ T4697] BTRFS info (device loop4): disabling tree log [ 78.187787][ T4697] BTRFS info (device loop4): using free space tree [ 78.200088][ T4704] loop2: detected capacity change from 0 to 2048 [ 78.203479][ T4704] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 78.208513][ T4704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.487203][ T4697] BTRFS info (device loop4): enabling ssd optimizations [ 78.625191][ T4704] UDF-fs: bad mount option "gad" or missing value [ 78.657143][ T4725] device syzkaller0 entered promiscuous mode [ 78.754503][ T4732] loop0: detected capacity change from 0 to 256 [ 78.756056][ T4732] exfat: Deprecated parameter 'namecase' [ 79.301274][ T4732] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 79.304975][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.375825][ T4268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4268) [ 81.656942][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.658639][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.664081][ T4783] loop3: detected capacity change from 0 to 256 [ 81.676853][ T4780] loop2: detected capacity change from 0 to 2048 [ 81.679727][ T4783] exfat: Deprecated parameter 'namecase' [ 81.687500][ T4780] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 81.695605][ T4780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.721830][ T4783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 81.752138][ T4326] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.878261][ T27] audit: type=1326 audit(81.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.2.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9577a28 code=0x0 [ 82.229811][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 82.232384][ T4326] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.233819][ T4326] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.235245][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.236774][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.238383][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.240013][ T4326] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.242230][ T4326] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.243815][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.247116][ T4326] usb 1-1: config 0 descriptor?? [ 82.459481][ T4326] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.831647][ T4811] futex_wake_op: syz.2.85 tries to shift op by 144; fix this program [ 83.625234][ T4326] usb 1-1: USB disconnect, device number 3 [ 83.626839][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.626950][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.627319][ T4326] usblp0: removed [ 83.732666][ T4837] fuse: Bad value for 'fd' [ 84.022863][ T4842] device syzkaller0 entered promiscuous mode [ 84.615273][ T4858] futex_wake_op: syz.1.99 tries to shift op by 144; fix this program [ 85.912025][ T4875] loop1: detected capacity change from 0 to 512 [ 85.939462][ T4875] EXT4-fs (loop1): 1 orphan inode deleted [ 85.953759][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.023957][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 86.207107][ T4895] fuse: Bad value for 'fd' [ 86.535790][ T4891] loop1: detected capacity change from 0 to 40427 [ 86.547009][ T4891] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.548949][ T4891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.552837][ T4891] F2FS-fs (loop1): invalid crc value [ 86.557260][ T4891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.569507][ T4891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.571157][ T4891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.618827][ T4339] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.624880][ T4339] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.828925][ T4911] process 'syz.4.115' launched './file2' with NULL argv: empty string added [ 87.285472][ T4927] loop0: detected capacity change from 0 to 64 [ 87.877943][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 87.916595][ T4932] loop3: detected capacity change from 0 to 32768 [ 87.920598][ T4932] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 87.950840][ T4270] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.958396][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 87.966646][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 87.971733][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 87.987135][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 87.999423][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 88.016271][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 88.032063][ T4936] 9pnet_fd: p9_fd_create_tcp (4936): problem connecting socket to 127.0.0.1 [ 88.919411][ T4955] Zero length message leads to an empty skb [ 88.948797][ T4960] loop1: detected capacity change from 0 to 16 [ 88.963834][ T4960] erofs: (device loop1): mounted with root inode @ nid 36. [ 89.104655][ T4965] loop0: detected capacity change from 0 to 128 [ 89.408489][ T4965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.412488][ T4972] loop4: detected capacity change from 0 to 4096 [ 90.110280][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 90.271446][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 92.041824][ T5017] overlayfs: failed to clone upperpath [ 92.614787][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.622473][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.645767][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 93.055842][ T5049] loop0: detected capacity change from 0 to 2048 [ 93.063226][ T5051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 93.068980][ T5051] binder: 5050:5051 tried to acquire reference to desc 0, got 1 instead [ 93.076057][ T5051] syz.4.162 (5051): drop_caches: 2 [ 93.077245][ T5051] syz.4.162 (5051): drop_caches: 2 [ 93.154208][ T5056] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.403369][ T5065] MPTCP: kernel_bind error, err=-98 [ 94.126152][ T5065] MPTCP: addr_signal error, rm_addr=4 [ 95.126648][ T5117] device syzkaller0 entered promiscuous mode [ 95.163044][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 95.166910][ T5121] device erspan1 entered promiscuous mode [ 95.260317][ T5132] loop0: detected capacity change from 0 to 64 [ 95.469387][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 95.521423][ T5156] loop3: detected capacity change from 0 to 128 [ 95.596671][ T5156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.613633][ T5161] loop4: detected capacity change from 0 to 64 [ 95.618253][ T5157] atomic_op 0000000058d829cb conn xmit_atomic 0000000000000000 [ 95.823414][ T5168] loop4: detected capacity change from 0 to 32768 [ 95.824863][ T5168] ======================================================= [ 95.824863][ T5168] WARNING: The mand mount option has been deprecated and [ 95.824863][ T5168] and is ignored by this kernel. Remove the mand [ 95.824863][ T5168] option from the mount to silence this warning. [ 95.824863][ T5168] ======================================================= [ 95.930575][ T5168] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.202 (5168) [ 96.001612][ T5168] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.003502][ T5168] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 96.004888][ T5168] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.006617][ T5168] BTRFS info (device loop4): use zstd compression, level 3 [ 96.007742][ T5168] BTRFS info (device loop4): force clearing of disk cache [ 96.008915][ T5168] BTRFS info (device loop4): enabling disk space caching [ 96.010120][ T5168] BTRFS info (device loop4): disk space caching is enabled [ 96.096718][ T5168] BTRFS info (device loop4): enabling ssd optimizations [ 96.098824][ T5168] BTRFS info (device loop4): rebuilding free space tree [ 96.105703][ T5168] BTRFS info (device loop4): disabling free space tree [ 96.107031][ T5168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.108744][ T5168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.236488][ T4283] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.331618][ T4270] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (4270) [ 96.395411][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 96.464210][ T5203] loop3: detected capacity change from 0 to 512 [ 96.468040][ T5203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.497759][ T5203] EXT4-fs (loop3): 1 truncate cleaned up [ 96.501118][ T5203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.011972][ T5217] loop1: detected capacity change from 0 to 64 [ 97.324872][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 97.468795][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 97.472299][ T5240] device erspan1 entered promiscuous mode [ 97.477288][ T5240] binder: 5239:5240 got transaction to invalid handle, 1 [ 97.478829][ T5240] binder: 5240:5239 cannot find target node [ 97.588235][ T5241] loop3: detected capacity change from 0 to 2048 [ 97.772539][ T5240] binder: 5239:5240 transaction call to 0:0 failed 13/29201/-22, size 0-12288 line 3045 [ 97.781072][ T5240] syz.0.220 (5240): drop_caches: 2 [ 97.782059][ T5240] syz.0.220 (5240): drop_caches: 2 [ 97.784754][ T4499] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.814960][ T5245] loop0: detected capacity change from 0 to 64 [ 97.837708][ T5247] syz.2.223 sent an empty control message without MSG_MORE. [ 98.082492][ T5254] overlayfs: failed to resolve './file1': -2 [ 98.802504][ T5266] netlink: 116 bytes leftover after parsing attributes in process `syz.0.228'. [ 99.328535][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.330318][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.331743][ T5278] binder: tried to use weak ref as strong ref [ 99.332901][ T5278] binder: 5275:5278 Acquire 1 refcount change on invalid ref 0 ret -22 [ 99.334598][ T5278] binder: 5275:5278 got transaction to invalid handle, 1 [ 99.335813][ T5278] binder: 5278:5275 cannot find target node [ 99.336871][ T5278] binder: 5275:5278 transaction call to 0:0 failed 16/29201/-22, size 0-12288 line 3045 [ 99.344920][ T5278] syz.4.232 (5278): drop_caches: 2 [ 99.346164][ T5278] syz.4.232 (5278): drop_caches: 2 [ 99.788930][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.802797][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.805710][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.118853][ T5265] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.120801][ T5265] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.122349][ T5265] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.123883][ T5265] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.194366][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 100.398122][ T5296] loop4: detected capacity change from 0 to 32768 [ 100.522274][ T5308] binder: 5300:5308 ioctl c0306201 0 returned -14 [ 100.530390][ T5308] binder: 5300:5308 ioctl 4018620d 0 returned -22 [ 100.532261][ T5308] binder: 5300:5308 ioctl c0306201 0 returned -14 [ 100.919619][ T5296] XFS (loop4): Mounting V5 Filesystem [ 100.971967][ T5296] XFS (loop4): Ending clean mount [ 100.979370][ T5296] XFS (loop4): Quotacheck needed: Please wait. [ 101.005280][ T5296] XFS (loop4): Quotacheck: Done. [ 101.053577][ T4283] XFS (loop4): Unmounting Filesystem [ 102.411187][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 102.418531][ T5340] binder: 5337:5340 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 102.477976][ T5338] binder: 5337:5338 Acquire 1 refcount change on invalid ref 0 ret -22 [ 102.503060][ T5338] binder: 5337:5338 got transaction to invalid handle, 1 [ 102.512703][ T5338] binder: 5338:5337 cannot find target node [ 102.519112][ T5338] binder: 5337:5338 transaction call to 0:0 failed 17/29201/-22, size 0-12288 line 3045 [ 102.523538][ T5338] syz.0.251 (5338): drop_caches: 2 [ 102.526084][ T5338] syz.0.251 (5338): drop_caches: 2 [ 102.541903][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.585412][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.587138][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.798149][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 104.811810][ T5387] device erspan1 entered promiscuous mode [ 105.182844][ T5373] loop4: detected capacity change from 0 to 32768 [ 105.186395][ T5391] binder: tried to use weak ref as strong ref [ 105.187371][ T5391] binder: 5386:5391 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.188976][ T5387] binder: 5386:5387 got transaction to invalid handle, 1 [ 105.190685][ T5387] binder: 5387:5386 cannot find target node [ 105.191665][ T5387] binder: 5386:5387 transaction call to 0:0 failed 20/29201/-22, size 0-12288 line 3045 [ 105.234881][ T5387] syz.3.267 (5387): drop_caches: 2 [ 105.237616][ T5387] syz.3.267 (5387): drop_caches: 2 [ 105.252431][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.273004][ T5373] (syz.4.261,5373,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.292926][ T5373] (syz.4.261,5373,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.383350][ T5373] JBD2: Ignoring recovery information on journal [ 105.384586][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.405260][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.504223][ T5373] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 105.616718][ T5407] loop0: detected capacity change from 0 to 512 [ 105.631116][ T5407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.663489][ T5407] EXT4-fs (loop0): 1 truncate cleaned up [ 105.664494][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.808669][ T5396] loop1: detected capacity change from 0 to 32768 [ 105.815819][ T5396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.269 (5396) [ 105.822380][ T5396] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.824115][ T5396] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 105.825726][ T5396] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.827398][ T5396] BTRFS info (device loop1): trying to use backup root at mount time [ 105.828681][ T5396] BTRFS info (device loop1): setting nodatasum [ 105.829673][ T5396] BTRFS info (device loop1): force zlib compression, level 3 [ 105.833996][ T5396] BTRFS info (device loop1): turning on flush-on-commit [ 105.839969][ T5396] BTRFS info (device loop1): max_inline at 9 [ 105.841513][ T5396] BTRFS info (device loop1): disabling tree log [ 105.842689][ T5396] BTRFS info (device loop1): using free space tree [ 106.055570][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 106.144735][ T5396] BTRFS info (device loop1): enabling ssd optimizations [ 106.202300][ T5436] loop4: detected capacity change from 0 to 512 [ 106.271910][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.274221][ T5436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.445771][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 106.508218][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 106.963485][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 106.971544][ T5462] binder: 5460:5462 tried to acquire reference to desc 0, got 1 instead [ 106.982659][ T5462] binder_alloc: 5460: binder_alloc_buf, no vma [ 106.985358][ T5464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.985985][ T5462] binder: cannot allocate buffer: vma cleared, target dead or dying [ 106.986852][ T5462] binder: 5460:5462 transaction call to 5460:0 failed 25/29189/-3, size 0-12288 line 3230 [ 107.013039][ T5462] syz.0.282 (5462): drop_caches: 2 [ 107.016833][ T5462] syz.0.282 (5462): drop_caches: 2 [ 107.019506][ T4653] binder: undelivered TRANSACTION_ERROR: 29189 [ 108.026489][ T5490] loop1: detected capacity change from 0 to 512 [ 108.035047][ T5490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.483581][ T5490] EXT4-fs (loop1): 1 truncate cleaned up [ 108.484739][ T5490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.935773][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 109.018594][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 109.587820][ T5533] loop4: detected capacity change from 0 to 4096 [ 109.607795][ T5533] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 109.620078][ T5533] ntfs3: loop4: Failed to load $Extend. [ 109.760080][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 109.763764][ T5541] binder: 5540:5541 tried to acquire reference to desc 0, got 1 instead [ 109.765468][ T5541] binder_alloc: 5540: binder_alloc_buf, no vma [ 109.766628][ T5541] binder: cannot allocate buffer: vma cleared, target dead or dying [ 109.766665][ T5541] binder: 5540:5541 transaction call to 5540:0 failed 30/29189/-3, size 0-12288 line 3230 [ 109.772665][ T5541] syz.0.308 (5541): drop_caches: 2 [ 109.777257][ T5541] syz.0.308 (5541): drop_caches: 2 [ 109.779683][ T4653] binder: undelivered TRANSACTION_ERROR: 29189 [ 109.809561][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 109.816763][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 109.820417][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 109.846698][ T4653] vcan0 speed is unknown, defaulting to 1000 [ 109.848359][ T5544] infiniband syz1: set down [ 109.849126][ T5544] infiniband syz1: added vcan0 [ 109.893545][ T5550] loop0: detected capacity change from 0 to 512 [ 109.911744][ T5550] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.930554][ T5550] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.309: bad orphan inode 16 [ 109.933983][ T5544] RDS/IB: syz1: added [ 109.939259][ T5550] ext4_test_bit(bit=15, block=4) = 0 [ 109.945202][ T5544] smc: adding ib device syz1 with port count 1 [ 109.945903][ T5550] EXT4-fs (loop0): 1 orphan inode deleted [ 109.946346][ T5544] smc: ib device syz1 port 1 has pnetid [ 109.949524][ T5550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.949664][ T4653] vcan0 speed is unknown, defaulting to 1000 [ 109.982537][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 109.992760][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 110.015974][ T5543] loop4: detected capacity change from 0 to 32768 [ 110.042487][ T5543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.305 (5543) [ 110.049500][ T5543] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.049610][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 110.052185][ T5543] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 110.054742][ T5543] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.056847][ T5543] BTRFS info (device loop4): trying to use backup root at mount time [ 110.058383][ T5543] BTRFS info (device loop4): setting nodatasum [ 110.059604][ T5543] BTRFS info (device loop4): force zlib compression, level 3 [ 110.061752][ T5543] BTRFS info (device loop4): turning on flush-on-commit [ 110.063035][ T5543] BTRFS info (device loop4): max_inline at 9 [ 110.064002][ T5543] BTRFS info (device loop4): disabling tree log [ 110.065274][ T5543] BTRFS info (device loop4): using free space tree [ 110.107560][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 110.137848][ T5543] BTRFS info (device loop4): enabling ssd optimizations [ 110.182431][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 110.262286][ T5544] vcan0 speed is unknown, defaulting to 1000 [ 110.404564][ T5582] loop0: detected capacity change from 0 to 32768 [ 110.406440][ T5582] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.316 (5582) [ 110.735018][ T4270] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4270) [ 110.744311][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.883331][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 110.887449][ T5594] binder: tried to use weak ref as strong ref [ 110.888511][ T5594] binder: 5593:5594 Acquire 1 refcount change on invalid ref 0 ret -22 [ 110.890214][ T5594] binder: 5593:5594 got transaction to invalid handle, 1 [ 110.891517][ T5594] binder: 5594:5593 cannot find target node [ 110.892484][ T5594] binder: 5593:5594 transaction call to 0:0 failed 33/29201/-22, size 0-12288 line 3045 [ 110.899493][ T5594] syz.4.319 (5594): drop_caches: 2 [ 110.908107][ T5594] syz.4.319 (5594): drop_caches: 2 [ 110.911075][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.435516][ T5604] loop4: detected capacity change from 0 to 2048 [ 111.456727][ T5605] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.613189][ T5613] loop0: detected capacity change from 0 to 1024 [ 112.029576][ T5613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.122435][ T5625] loop3: detected capacity change from 0 to 4096 [ 112.614673][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 112.623834][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 112.632662][ T5625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.635979][ T5625] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.641294][ T5635] device erspan1 entered promiscuous mode [ 112.653293][ T5625] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 112.654871][ T5625] System zones: 0-5 [ 112.656212][ T5625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.663362][ T5635] binder: tried to use weak ref as strong ref [ 112.664448][ T5635] binder: 5629:5635 Acquire 1 refcount change on invalid ref 0 ret -22 [ 112.672823][ T5635] binder: 5629:5635 got transaction to invalid handle, 1 [ 113.037457][ T5625] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 113.058963][ T5635] binder: 5635:5629 cannot find target node [ 113.060239][ T5635] binder: 5629:5635 transaction call to 0:0 failed 36/29201/-22, size 0-12288 line 3045 [ 113.063193][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.096471][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 113.960569][ T5655] loop1: detected capacity change from 0 to 32768 [ 113.976271][ T5655] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 115.019524][ T5671] loop0: detected capacity change from 0 to 64 [ 115.023175][ T4270] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 115.108014][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 115.113781][ T5674] binder: tried to use weak ref as strong ref [ 115.114817][ T5674] binder: 5672:5674 Acquire 1 refcount change on invalid ref 0 ret -22 [ 115.119570][ T5674] binder: 5672:5674 got transaction to invalid handle, 1 [ 115.121239][ T5674] binder: 5674:5672 cannot find target node [ 115.122337][ T5674] binder: 5672:5674 transaction call to 0:0 failed 39/29201/-22, size 0-12288 line 3045 [ 115.128989][ T5674] syz.0.346 (5674): drop_caches: 2 [ 115.134436][ T5679] fuse: Bad value for 'fd' [ 115.140671][ T5674] syz.0.346 (5674): drop_caches: 2 [ 115.142923][ T4735] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.645786][ T5682] loop3: detected capacity change from 0 to 32768 [ 115.656191][ T5682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.350 (5682) [ 115.669601][ T5682] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.673894][ T5682] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 115.683188][ T5682] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 115.693075][ T5682] BTRFS info (device loop3): trying to use backup root at mount time [ 115.969838][ T5682] BTRFS info (device loop3): setting nodatasum [ 115.970994][ T5682] BTRFS info (device loop3): force zlib compression, level 3 [ 115.972334][ T5682] BTRFS info (device loop3): turning on flush-on-commit [ 115.973648][ T5682] BTRFS info (device loop3): max_inline at 9 [ 115.974743][ T5682] BTRFS info (device loop3): disabling tree log [ 115.975848][ T5682] BTRFS info (device loop3): using free space tree [ 116.098848][ T5707] loop1: detected capacity change from 0 to 32768 [ 116.101843][ T5707] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 116.144278][ T4268] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.205926][ T5682] BTRFS info (device loop3): enabling ssd optimizations [ 116.307806][ T4289] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.719566][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 116.725742][ T5732] binder: BINDER_SET_CONTEXT_MGR already set [ 116.727125][ T5732] binder: 5731:5732 ioctl 4018620d 20004a80 returned -16 [ 116.736373][ T5732] syz.4.359 (5732): drop_caches: 2 [ 116.796301][ T5732] syz.4.359 (5732): drop_caches: 2 [ 117.200639][ T5741] loop4: detected capacity change from 0 to 16 [ 117.205782][ T5741] erofs: (device loop4): erofs_read_superblock: invalid sb_extslots 3824 (more than a fs block) [ 117.208922][ T27] audit: type=1326 audit(117.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.0.363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d577a28 code=0x0 [ 117.317955][ T27] audit: type=1326 audit(117.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.0.363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d577a28 code=0x0 [ 117.760884][ T5758] loop1: detected capacity change from 0 to 32768 [ 117.776828][ T5758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.368 (5758) [ 117.797371][ T5758] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.803608][ T5758] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 117.808382][ T5758] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.812216][ T5758] BTRFS info (device loop1): trying to use backup root at mount time [ 117.822248][ T5758] BTRFS info (device loop1): setting nodatasum [ 117.825282][ T5758] BTRFS info (device loop1): force zlib compression, level 3 [ 117.827700][ T5758] BTRFS info (device loop1): turning on flush-on-commit [ 117.831344][ T5758] BTRFS info (device loop1): max_inline at 9 [ 117.833749][ T5758] BTRFS info (device loop1): disabling tree log [ 117.836100][ T5758] BTRFS info (device loop1): using free space tree [ 117.873839][ T5758] BTRFS info (device loop1): enabling ssd optimizations [ 117.891959][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.004913][ T5784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.370'. [ 118.184166][ T5794] loop0: detected capacity change from 0 to 32768 [ 118.195670][ T5794] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.197466][ T5794] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 118.198783][ T5794] BTRFS info (device loop0): turning on async discard [ 118.199909][ T5794] BTRFS info (device loop0): metadata ratio 0 [ 118.200877][ T5794] BTRFS info (device loop0): setting nodatasum [ 118.201826][ T5794] BTRFS info (device loop0): using free space tree [ 119.032626][ T5794] BTRFS info (device loop0): enabling ssd optimizations [ 119.117702][ T5828] loop4: detected capacity change from 0 to 32768 [ 119.119590][ T5828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.380 (5828) [ 119.289899][ T5836] loop3: detected capacity change from 0 to 32768 [ 119.905183][ T5828] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.905187][ T5836] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.382 (5836) [ 119.905247][ T5828] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 119.911537][ T5836] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.913297][ T5836] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 119.914637][ T5836] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.916028][ T5836] BTRFS info (device loop3): setting datasum, datacow enabled [ 119.917347][ T5836] BTRFS info (device loop3): force clearing of disk cache [ 119.918514][ T5836] BTRFS info (device loop3): enabling ssd optimizations [ 119.919644][ T5836] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.919840][ T5828] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.920924][ T5836] BTRFS info (device loop3): turning on sync discard [ 119.922507][ T5828] BTRFS info (device loop4): trying to use backup root at mount time [ 119.923573][ T5836] BTRFS info (device loop3): turning off barriers [ 119.924880][ T5828] BTRFS info (device loop4): setting nodatasum [ 119.925928][ T5836] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.926944][ T5828] BTRFS info (device loop4): force zlib compression, level 3 [ 119.928244][ T5836] BTRFS info (device loop3): not using ssd optimizations [ 119.928259][ T5836] BTRFS info (device loop3): not using spread ssd allocation scheme [ 119.930238][ T5828] BTRFS info (device loop4): turning on flush-on-commit [ 119.930789][ T5836] BTRFS info (device loop3): using free space tree [ 119.932117][ T5828] BTRFS info (device loop4): max_inline at 9 [ 119.939446][ T5828] BTRFS info (device loop4): disabling tree log [ 119.949203][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.972885][ T5828] BTRFS info (device loop4): using free space tree [ 120.128259][ T5836] BTRFS info (device loop3): rebuilding free space tree [ 120.177965][ T4289] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.236778][ T5828] BTRFS info (device loop4): enabling ssd optimizations [ 120.293051][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.126309][ T5908] loop4: detected capacity change from 0 to 32768 [ 121.142781][ T5908] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.394 (5908) [ 121.184651][ T5908] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 121.192685][ T5908] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 121.195516][ T5908] BTRFS info (device loop4): force zlib compression, level 3 [ 121.242176][ T5908] BTRFS info (device loop4): turning on flush-on-commit [ 121.248915][ T5908] BTRFS info (device loop4): max_inline at 4096 [ 121.251844][ T5908] BTRFS info (device loop4): using free space tree [ 121.399558][ T5930] loop3: detected capacity change from 0 to 256 [ 122.320781][ T5930] FAT-fs (loop3): codepage cp94 not found [ 122.383651][ T5930] loop3: detected capacity change from 0 to 164 [ 122.401952][ T5930] netlink: 104 bytes leftover after parsing attributes in process `syz.3.399'. [ 122.419941][ T5908] BTRFS info (device loop4): enabling ssd optimizations [ 122.522991][ T5939] loop0: detected capacity change from 0 to 2048 [ 122.621187][ T5939] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 122.652731][ T5939] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 122.681207][ T5939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.868204][ T4283] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 123.060295][ T5978] Bluetooth: MGMT ver 1.22 [ 123.143412][ T5983] overlayfs: failed to resolve './file0': -2 [ 123.513911][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 123.758496][ T5995] loop3: detected capacity change from 0 to 32768 [ 123.788119][ T5995] JBD2: Ignoring recovery information on journal [ 123.817998][ T5995] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.919817][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.978311][ T4289] ocfs2: Unmounting device (7,3) on (node local) [ 124.099849][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 124.102882][ T4325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 124.105899][ T4325] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 124.107318][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.108660][ T4325] usb 1-1: Product: syz [ 124.108800][ T6021] overlayfs: failed to resolve './file0': -2 [ 124.109374][ T4325] usb 1-1: Manufacturer: syz [ 124.111210][ T4325] usb 1-1: SerialNumber: syz [ 124.386964][ T4325] usb 1-1: config 0 descriptor?? [ 124.390459][ T4325] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 124.918861][ T4325] gspca_zc3xx: reg_w_i err -110 [ 125.539869][ T4325] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 125.540964][ T4325] gspca_zc3xx: probe of 1-1:0.0 failed with error -110 [ 125.557011][ T6057] overlayfs: failed to resolve './file0': -2 [ 125.655429][ T6063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.436'. [ 125.661797][ T6049] loop3: detected capacity change from 0 to 40427 [ 125.674494][ T6049] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 125.676407][ T6049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 125.687614][ T6049] F2FS-fs (loop3): invalid crc value [ 125.693000][ T6049] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.704473][ T6049] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.705757][ T6049] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.921523][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943251][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.028364][ T4289] syz-executor: attempt to access beyond end of device [ 126.028364][ T4289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.238037][ T6087] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 126.644051][ T14] usb 1-1: USB disconnect, device number 4 [ 126.747398][ T6084] loop1: detected capacity change from 0 to 40427 [ 126.764465][ T6084] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 126.765610][ T6084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.772096][ T6084] F2FS-fs (loop1): invalid crc value [ 127.077719][ T6106] overlayfs: failed to resolve './file0': -2 [ 127.091200][ T6084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.094180][ T6110] fuse: Bad value for 'fd' [ 127.099012][ T6109] loop4: detected capacity change from 0 to 512 [ 127.109067][ T6084] F2FS-fs (loop1): Start checkpoint disabled! [ 127.145450][ T6084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.147073][ T6084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 127.148547][ T6109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.273862][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 127.529430][ T6131] loop4: detected capacity change from 0 to 32768 [ 127.599935][ T6131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.455 (6131) [ 127.787271][ T6131] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.788995][ T6131] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 127.790571][ T6131] BTRFS info (device loop4): turning on sync discard [ 127.791639][ T6131] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.793126][ T6131] BTRFS info (device loop4): use zstd compression, level 3 [ 127.794249][ T6131] BTRFS info (device loop4): turning on async discard [ 127.795403][ T6131] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.797325][ T6131] BTRFS info (device loop4): trying to use backup root at mount time [ 127.798910][ T6131] BTRFS info (device loop4): enabling auto defrag [ 127.800242][ T6131] BTRFS info (device loop4): using free space tree [ 127.912598][ T4339] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 127.915090][ T6131] BTRFS error (device loop4): failed to load root extent [ 127.916220][ T6131] BTRFS warning (device loop4): try to load backup roots slot 1 [ 127.917699][ T4339] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 127.920041][ T6131] BTRFS warning (device loop4): couldn't read tree root [ 127.921150][ T6131] BTRFS warning (device loop4): try to load backup roots slot 2 [ 127.922855][ T6131] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 127.924971][ T6131] BTRFS warning (device loop4): couldn't read tree root [ 127.926202][ T6131] BTRFS warning (device loop4): try to load backup roots slot 3 [ 128.224116][ T6131] BTRFS info (device loop4): enabling ssd optimizations [ 128.225643][ T6131] BTRFS info (device loop4): rebuilding free space tree [ 128.255141][ T6131] BTRFS info (device loop4): checking UUID tree [ 128.328739][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.331071][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.404670][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.537782][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.539281][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.079073][ T6182] loop4: detected capacity change from 0 to 32768 [ 129.108421][ T6182] XFS (loop4): Mounting V5 Filesystem [ 129.136266][ T6182] XFS (loop4): Ending clean mount [ 129.139293][ T6182] XFS (loop4): Quotacheck needed: Please wait. [ 129.161268][ T6182] XFS (loop4): Quotacheck: Done. [ 129.246466][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.248229][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.253229][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 129.255860][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.573396][ T6195] loop0: detected capacity change from 0 to 32768 [ 129.580724][ T6195] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.468 (6195) [ 129.599909][ T6195] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.601548][ T6195] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 129.602976][ T6195] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.620103][ T6195] BTRFS info (device loop0): use zstd compression, level 3 [ 129.621638][ T6195] BTRFS info (device loop0): using free space tree [ 129.680177][ T6195] BTRFS info (device loop0): enabling ssd optimizations [ 129.699149][ T4282] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.047870][ T4283] XFS (loop4): Unmounting Filesystem [ 130.065275][ T6229] ceph: No mds server is up or the cluster is laggy [ 130.071349][ T4736] libceph: connect (1)[c::]:6789 error -101 [ 130.073025][ T4736] libceph: mon0 (1)[c::]:6789 connect error [ 130.711817][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.714258][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.617818][ T6275] netlink: 'syz.2.487': attribute type 14 has an invalid length. [ 131.623478][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 132.706439][ T6294] loop1: detected capacity change from 0 to 1024 [ 132.768578][ T6296] loop3: detected capacity change from 0 to 256 [ 132.796433][ T6296] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 133.079830][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.622581][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 133.735311][ T6322] loop3: detected capacity change from 0 to 64 [ 133.906709][ T6317] loop1: detected capacity change from 0 to 40427 [ 133.918331][ T6317] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 134.214097][ T6317] F2FS-fs (loop1): invalid crc value [ 134.225942][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.228624][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.233610][ T6317] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.263495][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 134.337274][ T6317] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.375186][ T6317] syz.1.499: attempt to access beyond end of device [ 134.375186][ T6317] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.395817][ T6342] random: crng reseeded on system resumption [ 135.368044][ T6435] loop4: detected capacity change from 0 to 1024 [ 135.371884][ T6437] binder: 6436:6437 ioctl c0306201 0 returned -14 [ 135.373957][ T6437] binder: 6436:6437 ioctl c0306201 0 returned -14 [ 135.383021][ T6435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.461088][ T6435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.273145][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.275837][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.280624][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 136.309213][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 136.317566][ T6462] loop1: detected capacity change from 0 to 2048 [ 136.356697][ T6466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.383391][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 136.453970][ T6468] tipc: Enabling of bearer rejected, failed to enable media [ 136.493465][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 138.235412][ T6497] loop0: detected capacity change from 0 to 2048 [ 138.259333][ T6497] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 138.343002][ T6488] loop1: detected capacity change from 0 to 131072 [ 138.345857][ T6488] F2FS-fs (loop1): invalid crc value [ 138.364355][ T6497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.439576][ T6488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.451233][ T6488] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 138.495336][ T6488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 139.864265][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 141.211380][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 141.657647][ T6575] loop1: detected capacity change from 0 to 40427 [ 141.675468][ T6575] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.676863][ T6575] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.711702][ T6575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.744428][ T6575] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.745743][ T6575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.796736][ T6575] syz.1.560: attempt to access beyond end of device [ 141.796736][ T6575] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.812140][ T6575] syz.1.560: attempt to access beyond end of device [ 141.812140][ T6575] loop1: rw=2049, sector=45104, nr_sectors = 104 limit=40427 [ 141.821187][ T6575] syz.1.560: attempt to access beyond end of device [ 141.821187][ T6575] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.975439][ T6601] binder: 6600:6601 tried to acquire reference to desc 0, got 1 instead [ 141.978758][ T6601] binder_alloc: 6600: binder_alloc_buf, no vma [ 141.980619][ T6601] binder: cannot allocate buffer: vma cleared, target dead or dying [ 141.980654][ T6601] binder: 6600:6601 transaction call to 6600:0 failed 56/29189/-3, size 0-0 line 3230 [ 141.983930][ T4651] binder: release 6600:6601 transaction 49 out, still active [ 141.985420][ T4651] binder: undelivered TRANSACTION_COMPLETE [ 142.176511][ T4653] binder: undelivered TRANSACTION_ERROR: 29189 [ 142.177716][ T4653] binder: send failed reply for transaction 49, target dead [ 142.312644][ T6607] loop1: detected capacity change from 0 to 40427 [ 142.314308][ T6607] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.315436][ T6607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.317305][ T6607] F2FS-fs (loop1): invalid crc value [ 142.323643][ T6607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.337318][ T6607] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.338537][ T6607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.537674][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 142.603873][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.611818][ T6627] binder: 6625:6627 tried to acquire reference to desc 0, got 1 instead [ 142.615816][ T6627] binder: 6625:6627 got transaction with invalid data ptr [ 142.618211][ T6627] binder: 6625:6627 transaction call to 6625:0 failed 61/29201/-14, size 0-12288 line 3333 [ 142.625015][ T6627] syz.1.577 (6627): drop_caches: 2 [ 142.626147][ T6627] syz.1.577 (6627): drop_caches: 2 [ 142.627872][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.682008][ T6631] loop0: detected capacity change from 0 to 1024 [ 144.545374][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 144.606711][ T6667] binder: 6665:6667 tried to acquire reference to desc 0, got 1 instead [ 144.608455][ T6667] binder: 6665:6667 got transaction with invalid data ptr [ 144.610089][ T6667] binder: 6665:6667 transaction call to 6665:0 failed 66/29201/-14, size 0-12288 line 3333 [ 144.624223][ T6667] syz.0.590 (6667): drop_caches: 2 [ 144.625398][ T6667] syz.0.590 (6667): drop_caches: 2 [ 144.628181][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.462294][ T6696] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 145.847319][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 145.851589][ T6703] binder: 6698:6703 tried to acquire reference to desc 0, got 1 instead [ 145.853256][ T6703] binder: 6698:6703 got transaction with invalid data ptr [ 145.855780][ T6703] syz.1.603 (6703): drop_caches: 2 [ 145.858057][ T6703] syz.1.603 (6703): drop_caches: 2 [ 146.367673][ T6724] loop3: detected capacity change from 0 to 8 [ 146.447934][ T6728] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 146.883828][ T6737] loop1: detected capacity change from 0 to 1024 [ 146.897862][ T6737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.929219][ T6735] loop0: detected capacity change from 0 to 40427 [ 146.930659][ T6737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.935471][ T6735] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 146.937056][ T6735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 146.942906][ T6735] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 146.975415][ T6735] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 146.977624][ T6735] F2FS-fs (loop0): invalid crc value [ 146.979295][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 147.009559][ T6735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.012813][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 147.018151][ T6735] F2FS-fs (loop0): Start checkpoint disabled! [ 147.022942][ T6735] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 147.024180][ T6735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 147.030509][ T6745] binder: 6743:6745 tried to acquire reference to desc 0, got 1 instead [ 147.033361][ T6745] binder: 6743:6745 got transaction with invalid data ptr [ 147.034807][ T6745] binder_debug: 2 callbacks suppressed [ 147.034816][ T6745] binder: 6743:6745 transaction call to 6743:0 failed 76/29201/-14, size 0-12288 line 3333 [ 147.062133][ T6405] kworker/u4:17: attempt to access beyond end of device [ 147.062133][ T6405] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 147.062708][ T6745] syz.1.617 (6745): drop_caches: 2 [ 147.071307][ T6745] syz.1.617 (6745): drop_caches: 2 [ 147.074533][ T4489] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.121312][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.123472][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.753833][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.756222][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.154851][ T6782] [U]  [ 148.155669][ T6782] [U] K{ [ 148.156332][ T6782] [U] t 1ŠFfˊ`GJgo/mC [ 148.157529][ T6782] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 148.160419][ T6782] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 148.162183][ T6782] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 148.168429][ T6782] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 148.172617][ T6782] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 148.174651][ T6782] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 148.176645][ T6782] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 148.195619][ T6782] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 148.197112][ T6782] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 148.199302][ T6782] [U] 22Ʃx?0;3u [ 148.200069][ T6782] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 148.483146][ T6782] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 148.486780][ T6782] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 148.488289][ T6782] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 148.516773][ T6782] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 148.543371][ T6782] [U] ec [ 148.543927][ T6782] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 148.548572][ T6781] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 148.558549][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 148.563000][ T6789] binder: 6787:6789 got transaction to invalid handle, 1 [ 148.564242][ T6789] binder: 6789:6787 cannot find target node [ 148.568754][ T6789] binder: 6787:6789 transaction call to 0:0 failed 80/29201/-22, size 0-12288 line 3045 [ 148.573706][ T6789] syz.1.629 (6789): drop_caches: 2 [ 148.574722][ T6789] syz.1.629 (6789): drop_caches: 2 [ 148.576127][ T4490] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.223637][ T6795] loop1: detected capacity change from 0 to 32768 [ 149.264132][ T6795] XFS (loop1): Mounting V5 Filesystem [ 149.277734][ T6795] XFS (loop1): Ending clean mount [ 149.633009][ T4278] XFS (loop1): Unmounting Filesystem [ 149.689669][ T6820] loop3: detected capacity change from 0 to 512 [ 149.701797][ T6820] EXT4-fs: Ignoring removed orlov option [ 149.715083][ T6820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.740967][ T6820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.638: bg 0: block 384: padding at end of block bitmap is not set [ 149.745287][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 149.746358][ T6820] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 149.748169][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 149.749223][ T6820] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.638: attempt to clear invalid blocks 983260 len 1 [ 149.762813][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 149.766347][ T6820] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.638: Invalid inode table block 0 in block_group 0 [ 149.811380][ T6824] netlink: 'syz.4.637': attribute type 11 has an invalid length. [ 150.055651][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.057853][ T6820] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.062596][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.064060][ T6820] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 150.065735][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.067420][ T6820] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.638: Invalid inode table block 0 in block_group 0 [ 150.071208][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.080921][ T6820] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.084745][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.085858][ T6820] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.638: mark_inode_dirty error [ 150.087942][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.089044][ T6820] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 150.098452][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.100020][ T6820] EXT4-fs (loop3): 1 truncate cleaned up [ 150.101085][ T6820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.113266][ T6820] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.638: Invalid inode table block 0 in block_group 0 [ 150.115738][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 150.130832][ T6820] EXT4-fs (loop3): Remounting filesystem read-only [ 150.170811][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 150.174178][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 150.285502][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.287871][ T6840] Set syz1 is full, maxelem 0 reached [ 150.288231][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.388906][ T6849] loop0: detected capacity change from 0 to 128 [ 150.405375][ T6849] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.414269][ T6849] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.845780][ T6856] tipc: Enabling of bearer rejected, failed to enable media [ 150.907016][ T6864] tipc: Started in network mode [ 150.908043][ T6864] tipc: Node identity 4609b4083fc1, cluster identity 4711 [ 150.909521][ T6864] tipc: Enabled bearer , priority 0 [ 150.911831][ T6864] device syzkaller0 entered promiscuous mode [ 150.931864][ T6867] tipc: Failed to remove unknown binding: 66,1,1/0:1007132219/1007132221 [ 150.960129][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.966216][ T6864] tipc: Resetting bearer [ 150.970962][ T6868] binder: 6866:6868 got transaction to invalid handle, 1 [ 150.974100][ T6863] tipc: Resetting bearer [ 150.978696][ T6868] binder: 6868:6866 cannot find target node [ 150.980121][ T6868] binder: 6866:6868 transaction call to 0:0 failed 84/29201/-22, size 0-12288 line 3045 [ 150.983717][ T6868] syz.3.656 (6868): drop_caches: 2 [ 150.985965][ T6868] syz.3.656 (6868): drop_caches: 2 [ 150.988234][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.015241][ T6863] tipc: Disabling bearer [ 151.136129][ T6885] overlayfs: failed to clone lowerpath [ 151.783480][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 152.659667][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 152.670984][ T6937] binder: 6936:6937 tried to acquire reference to desc 0, got 1 instead [ 152.678078][ T6937] binder: 6936:6937 got transaction with invalid data ptr [ 152.683518][ T6937] binder: 6936:6937 transaction call to 6936:0 failed 89/29201/-14, size 0-12288 line 3333 [ 152.688236][ T6937] syz.1.683 (6937): drop_caches: 2 [ 152.691635][ T6937] syz.1.683 (6937): drop_caches: 2 [ 152.693459][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.354181][ T6959] loop3: detected capacity change from 0 to 4096 [ 153.698223][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 154.168633][ T6984] loop3: detected capacity change from 0 to 1024 [ 154.198808][ T6984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.221245][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.222718][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.225848][ T6991] netlink: 'syz.1.704': attribute type 17 has an invalid length. [ 154.227599][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 155.080812][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 155.153959][ T7022] sctp: [Deprecated]: syz.0.714 (pid 7022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.153959][ T7022] Use struct sctp_sack_info instead [ 155.263968][ T7028] overlayfs: failed to clone upperpath [ 155.367925][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 155.473113][ T7042] loop3: detected capacity change from 0 to 512 [ 155.488506][ T7042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.492035][ T7042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 155.493375][ T7042] System zones: 1-12 [ 155.494527][ T7042] EXT4-fs (loop3): 1 truncate cleaned up [ 155.495440][ T7042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.535747][ T7045] netlink: 'syz.2.722': attribute type 13 has an invalid length. [ 155.537178][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 155.538863][ T7045] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 155.887182][ T7034] loop1: detected capacity change from 0 to 32768 [ 155.938593][ T7034] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.979445][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 156.014567][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 156.017823][ T7058] binder: BINDER_SET_CONTEXT_MGR already set [ 156.018868][ T7058] binder: 7057:7058 ioctl 4018620d 20004a80 returned -16 [ 156.022406][ T7058] syz.1.724 (7058): drop_caches: 2 [ 156.024581][ T7058] syz.1.724 (7058): drop_caches: 2 [ 156.381081][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 156.489640][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 156.697528][ T7099] netlink: 'syz.4.737': attribute type 13 has an invalid length. [ 156.699038][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 156.703171][ T7099] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 157.310764][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 157.377113][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 157.856746][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 157.859014][ T7133] binder: 7128:7133 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 157.871917][ T7133] binder: 7128:7133 got transaction to invalid handle, 1 [ 157.873267][ T7133] binder: 7133:7128 cannot find target node [ 157.874219][ T7133] binder: 7128:7133 transaction call to 0:0 failed 93/29201/-22, size 0-12288 line 3045 [ 157.877634][ T7133] syz.3.747 (7133): drop_caches: 2 [ 157.880286][ T7133] syz.3.747 (7133): drop_caches: 2 [ 157.882450][ T4651] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.913665][ T7139] loop1: detected capacity change from 0 to 512 [ 157.917777][ T7136] netlink: 'syz.2.750': attribute type 14 has an invalid length. [ 157.919130][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.937742][ T7139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.060670][ T7148] netlink: 256 bytes leftover after parsing attributes in process `syz.4.754'. [ 158.175208][ T7163] netlink: 'syz.3.760': attribute type 11 has an invalid length. [ 158.176640][ T7163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.760'. [ 158.194231][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 158.249884][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 158.253746][ T7171] binder: 7168:7171 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 158.265423][ T7171] binder: 7168:7171 got transaction to invalid handle, 1 [ 158.266622][ T7171] binder: 7171:7168 cannot find target node [ 158.267628][ T7171] binder: 7168:7171 transaction call to 0:0 failed 96/29201/-22, size 0-12288 line 3045 [ 158.290228][ T7171] syz.1.763 (7171): drop_caches: 2 [ 158.292047][ T7171] syz.1.763 (7171): drop_caches: 2 [ 158.293764][ T4651] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.539415][ T7172] sctp: [Deprecated]: syz.3.764 (pid 7172) Use of int in max_burst socket option. [ 158.539415][ T7172] Use struct sctp_assoc_value instead [ 159.059022][ T7191] overlayfs: failed to clone upperpath [ 159.625200][ T7207] binder: 7205:7207 tried to acquire reference to desc 0, got 1 instead [ 159.627114][ T7207] binder: 7205:7207 got transaction with invalid data ptr [ 159.628378][ T7207] binder: 7205:7207 transaction call to 7205:0 failed 101/29201/-14, size 0-12288 line 3333 [ 159.635257][ T7207] syz.1.775 (7207): drop_caches: 2 [ 159.637058][ T7207] syz.1.775 (7207): drop_caches: 2 [ 159.638893][ T4324] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.493436][ T7223] netlink: 'syz.0.778': attribute type 14 has an invalid length. [ 160.543560][ T7227] loop3: detected capacity change from 0 to 512 [ 160.557107][ T7227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.571860][ T7227] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.781: bg 0: block 5: invalid block bitmap [ 160.574057][ T7227] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 160.575612][ T7227] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.781: invalid indirect mapped block 3 (level 2) [ 160.596576][ T7227] EXT4-fs (loop3): 2 truncates cleaned up [ 160.597661][ T7227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.629258][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 160.673555][ T7243] binder: 7239:7243 tried to acquire reference to desc 0, got 1 instead [ 160.675389][ T7243] binder: 7239:7243 got transaction with invalid data ptr [ 160.676576][ T7243] binder: 7239:7243 transaction call to 7239:0 failed 106/29201/-14, size 0-12288 line 3333 [ 160.679294][ T7243] syz.1.788 (7243): drop_caches: 2 [ 160.683979][ T7243] syz.1.788 (7243): drop_caches: 2 [ 160.685750][ T4324] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.771859][ T7254] overlayfs: failed to clone upperpath [ 161.073437][ T7256] overlayfs: failed to clone upperpath [ 161.207330][ T7263] __nla_validate_parse: 1 callbacks suppressed [ 161.207346][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 161.226183][ T7266] binder: 7264:7266 ioctl c0285840 20000000 returned -22 [ 161.940038][ T7281] bridge0: port 3(syz_tun) entered blocking state [ 161.941710][ T7281] bridge0: port 3(syz_tun) entered disabled state [ 161.945258][ T7281] device syz_tun entered promiscuous mode [ 161.947849][ T7281] bridge0: port 3(syz_tun) entered blocking state [ 161.949177][ T7281] bridge0: port 3(syz_tun) entered forwarding state [ 162.381497][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 162.383337][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 162.497803][ T7304] netlink: 'syz.0.809': attribute type 14 has an invalid length. [ 162.499217][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 162.531050][ T7298] loop1: detected capacity change from 0 to 32768 [ 162.542040][ T7298] XFS (loop1): Mounting V5 Filesystem [ 162.552823][ T7298] XFS (loop1): Ending clean mount [ 162.580174][ T4278] XFS (loop1): Unmounting Filesystem [ 162.983110][ T7322] binder: 7321:7322 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 162.987084][ T7322] syz.1.814 (7322): drop_caches: 2 [ 162.988133][ T7322] syz.1.814 (7322): drop_caches: 2 [ 162.991712][ T7324] fuse: Bad value for 'fd' [ 163.010962][ T7325] vcan0 speed is unknown, defaulting to 1000 [ 163.048595][ T7325] tipc: Started in network mode [ 163.050475][ T7325] tipc: Node identity 8, cluster identity 4711 [ 163.051337][ T7325] tipc: Node number set to 8 [ 163.098241][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 164.120192][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.123231][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.127923][ T7360] netlink: 'syz.1.827': attribute type 16 has an invalid length. [ 164.128623][ T7362] binder: 7361:7362 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 164.130686][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 164.133673][ T7362] syz.3.826 (7362): drop_caches: 2 [ 164.135485][ T7362] syz.3.826 (7362): drop_caches: 2 [ 164.149503][ T7363] vcan0 speed is unknown, defaulting to 1000 [ 164.176605][ T4339] tipc: Left network mode [ 164.210727][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 164.213369][ T7368] IPv6: sit1: Disabled Multicast RS [ 164.296356][ T7372] overlayfs: failed to clone upperpath [ 165.309182][ T7394] fuse: Bad value for 'fd' [ 165.337312][ T7392] binder: 7389:7392 tried to acquire reference to desc 0, got 1 instead [ 165.339298][ T7392] binder: 7389:7392 got transaction with invalid data ptr [ 165.340535][ T7392] binder: 7389:7392 transaction call to 7389:0 failed 113/29201/-14, size 0-12288 line 3333 [ 165.342951][ T4490] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.311516][ T7409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.845'. [ 166.409067][ T7412] device veth0_to_team entered promiscuous mode [ 166.416194][ T7415] loop3: detected capacity change from 0 to 8192 [ 166.419147][ T7415] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.688165][ T7412] device gretap0 entered promiscuous mode [ 166.760272][ T7415] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 166.761888][ T7415] FAT-fs (loop3): Filesystem has been set read-only [ 166.763608][ T7415] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 166.765174][ T7415] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 166.783968][ T7419] netlink: 'syz.4.848': attribute type 12 has an invalid length. [ 166.785521][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 166.797081][ T4289] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 167.247557][ T7429] trusted_key: encrypted_key: insufficient parameters specified [ 167.253143][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.255249][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.730472][ T27] audit: type=1326 audit(524455.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.0.858" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d577a28 code=0x0 [ 168.270496][ T7456] loop1: detected capacity change from 0 to 8192 [ 168.362128][ T7466] netlink: 'syz.4.867': attribute type 12 has an invalid length. [ 168.363526][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 168.371648][ T7467] netlink: 'syz.2.863': attribute type 2 has an invalid length. [ 168.412535][ C0] [ 168.412968][ C0] ================================ [ 168.413772][ C0] WARNING: inconsistent lock state [ 168.414611][ C0] syzkaller #0 Not tainted [ 168.415305][ C0] -------------------------------- [ 168.416128][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 168.417342][ C0] syz.2.863/7458 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 168.418431][ C0] ffff0000d1ac0d30 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x154/0x850 [ 168.420039][ C0] {SOFTIRQ-ON-W} state was registered at: [ 168.420962][ C0] lock_acquire+0x20c/0x63c [ 168.421715][ C0] _raw_spin_lock_nested+0x5c/0x78 [ 168.422556][ C0] __sk_receive_skb+0x154/0x850 [ 168.423352][ C0] pep_do_rcv+0x4b4/0x758 [ 168.424120][ C0] __release_sock+0x1b4/0x3b4 [ 168.424921][ C0] release_sock+0x60/0x1bc [ 168.425627][ C0] pep_sock_accept+0xc7c/0x1360 [ 168.426474][ C0] pn_socket_accept+0x120/0x2dc [ 168.427330][ C0] do_accept+0x448/0x5fc [ 168.428111][ C0] __sys_accept4+0xb4/0x12c [ 168.428915][ C0] __arm64_sys_accept+0x80/0x98 [ 168.429781][ C0] invoke_syscall+0x98/0x2b4 [ 168.430620][ C0] el0_svc_common+0x138/0x258 [ 168.431449][ C0] do_el0_svc+0x58/0x130 [ 168.432202][ C0] el0_svc+0x58/0x128 [ 168.432893][ C0] el0t_64_sync_handler+0x84/0xf0 [ 168.433777][ C0] el0t_64_sync+0x18c/0x190 [ 168.434566][ C0] irq event stamp: 4572 [ 168.435207][ C0] hardirqs last enabled at (4572): [] _raw_spin_unlock_irq+0x3c/0x90 [ 168.436858][ C0] hardirqs last disabled at (4571): [] _raw_spin_lock_irq+0x34/0x98 [ 168.438486][ C0] softirqs last enabled at (4566): [] local_bh_enable+0x10/0x34 [ 168.440124][ C0] softirqs last disabled at (4567): [] __do_softirq+0x14/0x20 [ 168.441697][ C0] [ 168.441697][ C0] other info that might help us debug this: [ 168.443036][ C0] Possible unsafe locking scenario: [ 168.443036][ C0] [ 168.444377][ C0] CPU0 [ 168.444957][ C0] ---- [ 168.445481][ C0] lock(slock-AF_PHONET/1); [ 168.446252][ C0] [ 168.446830][ C0] lock(slock-AF_PHONET/1); [ 168.447624][ C0] [ 168.447624][ C0] *** DEADLOCK *** [ 168.447624][ C0] [ 168.448976][ C0] 5 locks held by syz.2.863/7458: [ 168.449814][ C0] #0: ffff0000cf9de210 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 168.451557][ C0] #1: ffff0000f3860130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x94/0x744 [ 168.453211][ C0] #2: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 168.454915][ C0] #3: ffff0000d1ac06f0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x164/0x850 [ 168.456617][ C0] #4: ffff0000d1ac0770 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x600/0xa4c [ 168.458378][ C0] [ 168.458378][ C0] stack backtrace: [ 168.459383][ C0] CPU: 0 PID: 7458 Comm: syz.2.863 Not tainted syzkaller #0 [ 168.460603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.462304][ C0] Call trace: [ 168.462878][ C0] dump_backtrace+0x1c0/0x1ec [ 168.463701][ C0] show_stack+0x2c/0x3c [ 168.464452][ C0] __dump_stack+0x30/0x40 [ 168.465228][ C0] dump_stack_lvl+0xf4/0x15c [ 168.465962][ C0] dump_stack+0x1c/0x5c [ 168.466660][ C0] print_usage_bug+0x4c0/0x6d8 [ 168.467497][ C0] mark_lock_irq+0x850/0xab0 [ 168.468257][ C0] mark_lock+0x224/0x320 [ 168.469020][ C0] __lock_acquire+0xa78/0x6800 [ 168.469854][ C0] lock_acquire+0x20c/0x63c [ 168.470593][ C0] _raw_spin_lock_nested+0x5c/0x78 [ 168.471424][ C0] __sk_receive_skb+0x154/0x850 [ 168.472303][ C0] pep_do_rcv+0x4b4/0x758 [ 168.473095][ C0] __sk_receive_skb+0x3d0/0x850 [ 168.473901][ C0] phonet_rcv+0x600/0xa4c [ 168.474612][ C0] __netif_receive_skb+0xcc/0x2a8 [ 168.475492][ C0] process_backlog+0x408/0x710 [ 168.476332][ C0] __napi_poll+0xb4/0x3f0 [ 168.477023][ C0] net_rx_action+0x514/0xb18 [ 168.477813][ C0] handle_softirqs+0x318/0xc60 [ 168.478641][ C0] __do_softirq+0x14/0x20 [ 168.479358][ C0] ____do_softirq+0x14/0x20 [ 168.480099][ C0] call_on_irq_stack+0x30/0x48 [ 168.480927][ C0] do_softirq_own_stack+0x20/0x2c [ 168.481801][ C0] do_softirq+0xf8/0x1a8 [ 168.482479][ C0] __local_bh_enable_ip+0x250/0x37c [ 168.483369][ C0] local_bh_enable+0x28/0x34 [ 168.484194][ C0] netif_rx+0xa4/0xc4 [ 168.484841][ C0] pn_send+0x454/0x6d8 [ 168.485537][ C0] pn_skb_send+0x1dc/0x50c [ 168.486384][ C0] pep_sock_close+0x3e4/0x744 [ 168.487134][ C0] pn_socket_release+0x9c/0xbc [ 168.487962][ C0] sock_close+0xb4/0x1f8 [ 168.488716][ C0] __fput+0x1bc/0x7b8 [ 168.489366][ C0] ____fput+0x20/0x30 [ 168.490010][ C0] task_work_run+0x1ec/0x278 [ 168.490788][ C0] do_notify_resume+0x1fa0/0x2aa4 [ 168.491672][ C0] el0_svc+0x98/0x128 [ 168.492334][ C0] el0t_64_sync_handler+0x84/0xf0 [ 168.493177][ C0] el0t_64_sync+0x18c/0x190