last executing test programs: 1m17.728406228s ago: executing program 3 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1m17.586668362s ago: executing program 3 (id=32): capset(0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x121002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.572397645s ago: executing program 3 (id=34): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1ba, &(0x7f0000000280)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x1) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x2120, 0x0) fsopen(&(0x7f0000000000)='anon_inodefs\x00', 0x1) 1m3.007491922s ago: executing program 3 (id=87): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {0xa, 0x2, 0xb7af, 0x8001}, 0x7, [0xb, 0x6, 0x7, 0x2, 0x8000, 0x5, 0x7, 0x6, 0x5, 0xfd9c, 0x1, 0x5, 0x80, 0xc00000, 0x81b, 0x10000, 0x3, 0x8329, 0x7f, 0x1, 0x2, 0x2a, 0x1, 0xfffffff8, 0x380, 0x10005, 0x3, 0x7, 0xc22, 0x3, 0x9a3, 0xb, 0x10001, 0x101, 0x401, 0x80000, 0x1, 0x6, 0x0, 0x8, 0xde, 0x0, 0x1, 0x58, 0x8, 0x731, 0x3, 0x24, 0x8, 0xd2, 0x7, 0xedba, 0x8, 0x1, 0x1, 0xffff3d9b, 0xefe, 0x9, 0x6, 0x18000, 0xfaf4, 0x1, 0x6, 0x4], [0x1, 0x3, 0x8, 0x5, 0x81, 0x8e, 0xf7a, 0x74d7, 0x7, 0x1, 0x2, 0x1ff, 0x5, 0x10, 0x4, 0x2, 0x1, 0xd6cb, 0x401, 0xf2, 0x2, 0x6, 0xb9e, 0x80, 0x9, 0x6, 0x8, 0x6, 0x8, 0x43, 0x9, 0x4, 0x7f, 0xfffffff9, 0x5, 0xb, 0x42, 0x6, 0x8, 0x266, 0xffffffff, 0xe7f1, 0x3, 0x6, 0x5, 0x5, 0x4ab, 0x4, 0x4, 0x100, 0x5, 0x8, 0x3, 0x40, 0x0, 0x628, 0x9, 0x9, 0xad4, 0xb5, 0xfff, 0x1, 0x101, 0x1], [0x1e4, 0x1, 0xfff, 0xe24e, 0x10, 0xe, 0x9, 0x6, 0x9, 0xf0, 0x5, 0x8bbe, 0x2, 0x1ff, 0x8, 0x4, 0xe100, 0x9, 0xfffffffe, 0x58d, 0x7f, 0x6, 0x1, 0x100, 0xb, 0x3, 0x200, 0x101, 0xcdc, 0xfffffffa, 0x6, 0x200, 0x8, 0x7, 0x3, 0x7926, 0x1, 0xfff, 0xd, 0x10, 0x4, 0x800, 0x7, 0x40, 0x1, 0xec71, 0x6, 0x26f95de4, 0x1000, 0x10000, 0x9, 0x7fff, 0xa5, 0x10, 0x0, 0x9, 0x11, 0x40ea1f, 0x51, 0x0, 0x10, 0x1, 0x7fffffff, 0x9], [0x2, 0x100, 0x1, 0x60, 0x80000000, 0xcadc, 0x3, 0x4c, 0x7fffffff, 0xfffffffb, 0xce8, 0xad18, 0x6, 0x0, 0x9, 0x8000, 0x0, 0x8000, 0x4, 0xde1, 0x3, 0x9, 0xf, 0x2, 0xfffffc00, 0x5, 0x202e, 0x9, 0x0, 0x1, 0xff, 0x8000, 0x9, 0x2, 0x4, 0x1, 0x4, 0x1, 0x1000fff, 0x1, 0xf, 0x6, 0x7, 0x5, 0x1, 0x1000, 0x7, 0x3, 0x80000001, 0x9, 0x9, 0x10080, 0xd, 0x1, 0x401, 0x6, 0x101, 0x1000, 0x3, 0x8, 0x2, 0x100, 0x8, 0x9a5]}, 0x45c) 1m0.537550378s ago: executing program 3 (id=95): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x810411, &(0x7f0000000480)=ANY=[], 0x1, 0x205, &(0x7f00000015c0)="$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") open$dir(&(0x7f0000000180)='./file0\x00', 0x80000, 0x0) 59.964194021s ago: executing program 3 (id=99): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r2) 59.733998106s ago: executing program 32 (id=99): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r2) 23.412049594s ago: executing program 5 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, r1, 0xa09, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffffff7}]}]}, 0x3c}}, 0x40) 22.300666949s ago: executing program 5 (id=218): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) getpid() setns(0xffffffffffffffff, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 21.107146246s ago: executing program 5 (id=222): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@block_validity}, {@grpid}]}, 0x1, 0x77f, &(0x7f0000000840)="$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") capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.814123942s ago: executing program 5 (id=224): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {0xa, 0x2, 0xb7af, 0x8001}, 0x7, [0xb, 0x6, 0x7, 0x2, 0x8000, 0x5, 0x7, 0x6, 0x5, 0xfd9c, 0x1, 0x5, 0x80, 0xc00000, 0x81b, 0x10000, 0x3, 0x8329, 0x7f, 0x1, 0x2, 0x2a, 0x1, 0xfffffff8, 0x380, 0x10005, 0x3, 0x7, 0xc22, 0x3, 0x9a3, 0xb, 0x10001, 0x101, 0x401, 0x80000, 0x1, 0x6, 0x0, 0x8, 0xde, 0x0, 0x1, 0x58, 0x8, 0x731, 0x3, 0x24, 0x8, 0xd2, 0x7, 0xedba, 0x8, 0x1, 0x1, 0xffff3d9b, 0xefe, 0x9, 0x6, 0x18000, 0xfaf4, 0x1, 0x6, 0x4], [0x1, 0x3, 0x8, 0x5, 0x81, 0x8e, 0xf7a, 0x74d7, 0x7, 0x1, 0x2, 0x1ff, 0x5, 0x10, 0x4, 0x2, 0x1, 0xd6cb, 0x401, 0xf2, 0x2, 0x6, 0xb9e, 0x80, 0x9, 0x6, 0x8, 0x6, 0x8, 0x43, 0x9, 0x4, 0x7f, 0xfffffff9, 0x5, 0xb, 0x42, 0x6, 0x8, 0x266, 0xffffffff, 0xe7f1, 0x3, 0x6, 0x5, 0x5, 0x4ab, 0x4, 0x4, 0x100, 0x5, 0x8, 0x3, 0x40, 0x0, 0x628, 0x9, 0x9, 0xad4, 0xb5, 0xfff, 0x1, 0x101, 0x1], [0x1e4, 0x1, 0xfff, 0xe24e, 0x10, 0xe, 0x9, 0x6, 0x9, 0xf0, 0x5, 0x8bbe, 0x2, 0x1ff, 0x8, 0x4, 0xe100, 0x9, 0xfffffffe, 0x58d, 0x7f, 0x6, 0x1, 0x100, 0xb, 0x3, 0x200, 0x101, 0xcdc, 0xfffffffa, 0x6, 0x200, 0x8, 0x7, 0x3, 0x7926, 0x1, 0xfff, 0xd, 0x10, 0x4, 0x800, 0x7, 0x40, 0x1, 0xec71, 0x6, 0x26f95de4, 0x1000, 0x10000, 0x9, 0x7fff, 0xa5, 0x10, 0x0, 0x9, 0x11, 0x40ea1f, 0x51, 0x0, 0x10, 0x1, 0x7fffffff, 0x9], [0x2, 0x100, 0x1, 0x60, 0x80000000, 0xcadc, 0x3, 0x4c, 0x7fffffff, 0xfffffffb, 0xce8, 0xad18, 0x6, 0x0, 0x9, 0x8000, 0x0, 0x8000, 0x4, 0xde1, 0x3, 0x9, 0xf, 0x2, 0xfffffc00, 0x5, 0x202e, 0x9, 0x0, 0x1, 0xff, 0x8000, 0x9, 0x2, 0x4, 0x1, 0x4, 0x1, 0x1000fff, 0x1, 0xf, 0x6, 0x7, 0x5, 0x1, 0x1000, 0x7, 0x3, 0x80000001, 0x9, 0x9, 0x10080, 0xd, 0x1, 0x401, 0x6, 0x101, 0x1000, 0x3, 0x8, 0x2, 0x100, 0x8, 0x9a5]}, 0x45c) 19.255031648s ago: executing program 5 (id=231): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="d5d7d4", 0x3, 0x20002815, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000000)=""/155, &(0x7f00000000c0)=0x9b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 18.546717414s ago: executing program 0 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000100)=ANY=[@ANYBLOB="29fb224b6d7461696c3d302c747a3d5554432c757466383d302c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c747a3d5554432c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,iocharset=cp437,shortname=winnt,discard,shortname=mixed,check=strict,dmask=00000000000000000000007,shortname=lower,gid=', @ANYRESHEX, @ANYBLOB=',rodir,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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") ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT=r2, @ANYRES16], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 18.406896317s ago: executing program 5 (id=240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff000000002a0cffff85000000a80000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 17.960985707s ago: executing program 33 (id=240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff000000002a0cffff85000000a80000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 17.878553159s ago: executing program 0 (id=246): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 16.659405056s ago: executing program 0 (id=248): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x600, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0x2, 0x69}) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0xce, 0x9, 0x0, 0x7, 0x0, 0x20000000005, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x847}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.193430507s ago: executing program 0 (id=253): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {0xa, 0x2, 0xb7af, 0x8001}, 0x7, [0xb, 0x6, 0x7, 0x2, 0x8000, 0x5, 0x7, 0x6, 0x5, 0xfd9c, 0x1, 0x5, 0x80, 0xc00000, 0x81b, 0x10000, 0x3, 0x8329, 0x7f, 0x1, 0x2, 0x2a, 0x1, 0xfffffff8, 0x380, 0x10005, 0x3, 0x7, 0xc22, 0x3, 0x9a3, 0xb, 0x10001, 0x101, 0x401, 0x80000, 0x1, 0x6, 0x0, 0x8, 0xde, 0x0, 0x1, 0x58, 0x8, 0x731, 0x3, 0x24, 0x8, 0xd2, 0x7, 0xedba, 0x8, 0x1, 0x1, 0xffff3d9b, 0xefe, 0x9, 0x6, 0x18000, 0xfaf4, 0x1, 0x6, 0x4], [0x1, 0x3, 0x8, 0x5, 0x81, 0x8e, 0xf7a, 0x74d7, 0x7, 0x1, 0x2, 0x1ff, 0x5, 0x10, 0x4, 0x2, 0x1, 0xd6cb, 0x401, 0xf2, 0x2, 0x6, 0xb9e, 0x80, 0x9, 0x6, 0x8, 0x6, 0x8, 0x43, 0x9, 0x4, 0x7f, 0xfffffff9, 0x5, 0xb, 0x42, 0x6, 0x8, 0x266, 0xffffffff, 0xe7f1, 0x3, 0x6, 0x5, 0x5, 0x4ab, 0x4, 0x4, 0x100, 0x5, 0x8, 0x3, 0x40, 0x0, 0x628, 0x9, 0x9, 0xad4, 0xb5, 0xfff, 0x1, 0x101, 0x1], [0x1e4, 0x1, 0xfff, 0xe24e, 0x10, 0xe, 0x9, 0x6, 0x9, 0xf0, 0x5, 0x8bbe, 0x2, 0x1ff, 0x8, 0x4, 0xe100, 0x9, 0xfffffffe, 0x58d, 0x7f, 0x6, 0x1, 0x100, 0xb, 0x3, 0x200, 0x101, 0xcdc, 0xfffffffa, 0x6, 0x200, 0x8, 0x7, 0x3, 0x7926, 0x1, 0xfff, 0xd, 0x10, 0x4, 0x800, 0x7, 0x40, 0x1, 0xec71, 0x6, 0x26f95de4, 0x1000, 0x10000, 0x9, 0x7fff, 0xa5, 0x10, 0x0, 0x9, 0x11, 0x40ea1f, 0x51, 0x0, 0x10, 0x1, 0x7fffffff, 0x9], [0x2, 0x100, 0x1, 0x60, 0x80000000, 0xcadc, 0x3, 0x4c, 0x7fffffff, 0xfffffffb, 0xce8, 0xad18, 0x6, 0x0, 0x9, 0x8000, 0x0, 0x8000, 0x4, 0xde1, 0x3, 0x9, 0xf, 0x2, 0xfffffc00, 0x5, 0x202e, 0x9, 0x0, 0x1, 0xff, 0x8000, 0x9, 0x2, 0x4, 0x1, 0x4, 0x1, 0x1000fff, 0x1, 0xf, 0x6, 0x7, 0x5, 0x1, 0x1000, 0x7, 0x3, 0x80000001, 0x9, 0x9, 0x10080, 0xd, 0x1, 0x401, 0x6, 0x101, 0x1000, 0x3, 0x8, 0x2, 0x100, 0x8, 0x9a5]}, 0x45c) 13.79819311s ago: executing program 0 (id=263): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5e8, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x518, 0x22b, 0x258, 0x518, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0xfffc, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES16], 0x2, 0x225, &(0x7f0000000700)="$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") socket$nl_audit(0x10, 0x3, 0x9) 11.048182062s ago: executing program 0 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c, 0x0}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x2110, 0x4) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240040a2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020f301f8ff0000004a891f5f1bdef675000000000a0000000f580ab40fff0021cb000000800000"], 0x24}}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) 10.806237977s ago: executing program 34 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c, 0x0}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x2110, 0x4) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240040a2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020f301f8ff0000004a891f5f1bdef675000000000a0000000f580ab40fff0021cb000000800000"], 0x24}}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) 9.088440886s ago: executing program 4 (id=279): write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x4}, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000000002, 0x2) 7.290133736s ago: executing program 4 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000102010100000000000000000a0001003c0001802c00018014000300ff01000000000000000000000000000114000400fe8000000000000010000000000000260c000280"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 7.166376179s ago: executing program 4 (id=283): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000700)={[{@utf8}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_lower}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@nonumtail}, {@shortname_lower}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb6}}]}, 0x1, 0x361, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) writev(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2ea0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, r3, 0x0, 0x4) 6.499701744s ago: executing program 4 (id=288): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098a00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.56097862s ago: executing program 1 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 3.380458295s ago: executing program 1 (id=297): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0], 0xfe, 0x698, &(0x7f0000003680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x105, 0x0) setresuid(0x0, 0xee00, 0x0) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 3.012546642s ago: executing program 1 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x4000000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) 1.986895036s ago: executing program 4 (id=301): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="069f39501c"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.820441859s ago: executing program 2 (id=302): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) 1.78933132s ago: executing program 2 (id=303): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 1.596297675s ago: executing program 2 (id=304): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x24}}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000c00), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r9, 0x400c55cb, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000640)={&(0x7f0000000240), 0x15, &(0x7f0000000600)={&(0x7f0000000480)={0x160, r6, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x132, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x6, @broadcast, 0x8, @value, 0x537d, 0x5, @device_b, 0x1}}, @perr={0x84, 0x7c, {0x6, 0x8}}, @tim={0x5, 0x7f, {0x4, 0xc7, 0x0, "ae7788aecc48e2fc3d83ee1dc0871e2f1371fd4137d1198e1acd01b88d395457aeb44ee2087990d570a99e443384f1e26a56a89cf47996964ab464b68e92af54895fbabdd52d24cce9612b6780e2ec5fd50a21897a098ff00345a88e4465320510bba5a60f0dd749f5c9e75e3f73d0337cb84b4271ed5c75741725d0"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}]}, 0x160}}, 0x40840) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) 1.027227557s ago: executing program 1 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 808.315792ms ago: executing program 1 (id=306): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88448c, 0x0, 0x0, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') rename(0x0, 0x0) 677.771845ms ago: executing program 2 (id=307): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x2}, @mss={0x2, 0x3}, @mss={0x2, 0x4}, @window={0x3, 0x2, 0x4}, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0xfffe}, @mss={0x2, 0x201}], 0x8) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x218, 0x805, 0x0, 0x0) 528.714408ms ago: executing program 2 (id=308): bpf$ENABLE_STATS(0x20, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 282.679574ms ago: executing program 2 (id=309): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 205.324866ms ago: executing program 1 (id=310): pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x4}, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000000002, 0x2) 0s ago: executing program 4 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000003c0)={r1, &(0x7f0000000240)='@,\x00', 0x4400, &(0x7f0000000280)={@_ha_fsid={[0x4, 0xd4ef]}, {0x5, 0x10, 0x0, 0xe}}, 0x10000, &(0x7f00000002c0), &(0x7f0000000380)=0x6}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) recvmsg(r4, 0x0, 0x0) mkdir(0x0, 0xd8) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.845896][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.856623][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. syzkaller login: [ 63.092268][ T4174] cgroup: Unknown subsys name 'net' [ 63.199953][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.687169][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.132843][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.175271][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.202270][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.296850][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.335476][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.375249][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.383472][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.392793][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.402078][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.409279][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.417621][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.452947][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.460249][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.468243][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.476524][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.484074][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.492379][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.538531][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.546363][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.555104][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.566768][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.574248][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.582827][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.590094][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.597205][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.605553][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.629030][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.651289][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.658460][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.667036][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.676485][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.688242][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.713724][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.732496][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.756147][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.784263][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791672][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.800033][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.815953][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.835054][ T4186] team0: Port device team_slave_0 added [ 66.841561][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.848644][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.857237][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.874172][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.886243][ T4187] team0: Port device team_slave_0 added [ 66.899179][ T4186] team0: Port device team_slave_1 added [ 66.920534][ T4189] team0: Port device team_slave_0 added [ 66.935511][ T4187] team0: Port device team_slave_1 added [ 66.960430][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.967420][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.994070][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.007467][ T4189] team0: Port device team_slave_1 added [ 67.023307][ T4188] team0: Port device team_slave_0 added [ 67.031220][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.041104][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.048119][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.074903][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.094273][ T4188] team0: Port device team_slave_1 added [ 67.101418][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.108391][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.135121][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.148277][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.155308][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.181953][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.195276][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.259860][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.267505][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.295278][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.309432][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.316573][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.343440][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.370129][ T4190] team0: Port device team_slave_0 added [ 67.382616][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.390119][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.404302][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.411566][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.437757][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.451278][ T4190] team0: Port device team_slave_1 added [ 67.480388][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.487478][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.494443][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.502481][ T4186] Cannot create hsr debugfs directory [ 67.508538][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.515709][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.542047][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.585407][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.592908][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.600744][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.608328][ T4189] Cannot create hsr debugfs directory [ 67.618185][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.625964][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.652798][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.669229][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.676557][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.702996][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.788829][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.796318][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.803130][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.811420][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 67.811420][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 67.812457][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 67.818246][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 67.836031][ T4188] Cannot create hsr debugfs directory [ 67.885884][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.893581][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.900018][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.907320][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.915046][ T4190] Cannot create hsr debugfs directory [ 68.202806][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.214351][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.223734][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.239806][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.286555][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.311421][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.324631][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.341630][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.409143][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.426912][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.441402][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.456604][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.467195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.477671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.486483][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.511091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.521597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.530932][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.538187][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.546947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.558351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.567192][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.574309][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.582973][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.608374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.617552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.664987][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.677447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.687187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.698235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.707537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.716555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.727125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.736052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.744890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.755888][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.765353][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.790964][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.801556][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.811141][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.819303][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.835341][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.845460][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.853773][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.872165][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.897997][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.916461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.932518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.944500][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.951869][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.967630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.978796][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.023570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.034066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.044484][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.051648][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.060560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.069582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.078318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.087904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.097067][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.110843][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.136305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.146503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.160649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.171139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.180404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.204055][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.232236][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.244060][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.262659][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.271761][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.294022][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.306104][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.317684][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.330721][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.366961][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.395935][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.413984][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.427859][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.438274][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.445886][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.478831][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.513417][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.521823][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.532828][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.545853][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.555056][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.563740][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.570868][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.579490][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.587055][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.595011][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.605496][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.629764][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.654868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.671666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.688095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.697311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.711603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.733897][ T4187] device veth0_vlan entered promiscuous mode [ 69.748876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.760345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.769096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.779039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.787975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.797294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.807113][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.825093][ T4187] device veth1_vlan entered promiscuous mode [ 69.845674][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.856503][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.884708][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.892722][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.900673][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.904677][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.907193][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 69.918583][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.931560][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.941547][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.953186][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 69.959643][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.971447][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 69.993100][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.007162][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.016515][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.032815][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.046267][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.053441][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.069034][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.078142][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.092810][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.121856][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.143165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.154301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.163970][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.171121][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.184502][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.194167][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.204403][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.211635][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.237752][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.249277][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.267315][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.278141][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.295147][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.306782][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.319204][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.326661][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.340656][ T4187] device veth0_macvtap entered promiscuous mode [ 70.348040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.391888][ T4187] device veth1_macvtap entered promiscuous mode [ 70.406452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.415621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.424961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.433978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.443960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.454438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.464015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.473881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.483065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.500127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.515291][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.526713][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.548040][ T4186] device veth0_vlan entered promiscuous mode [ 70.562259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.573541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.583756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.593006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.602227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.611895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.620841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.630119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.642978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.651390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.660926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.668749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.677240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.684945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.704278][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.732550][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.743258][ T4186] device veth1_vlan entered promiscuous mode [ 70.752805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.766315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.778398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.790420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.802056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.811207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.827023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.838784][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.858640][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.868381][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.877590][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.886612][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.916175][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.924770][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.936665][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.946986][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.956725][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.971149][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.056321][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.082172][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.097255][ T4186] device veth0_macvtap entered promiscuous mode [ 71.127589][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.136137][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.152735][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.190489][ T4186] device veth1_macvtap entered promiscuous mode [ 71.229955][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.238183][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.247091][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.259470][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266531][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.284260][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.303570][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.315782][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.328638][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.345319][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.367123][ T4190] device veth0_vlan entered promiscuous mode [ 71.368076][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.391947][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.401642][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.412066][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.422097][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.431339][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.458441][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.470081][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.483497][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.512939][ T4190] device veth1_vlan entered promiscuous mode [ 71.525195][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.529008][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.541399][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.549659][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.554416][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.566495][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.576212][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.588024][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.597301][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.606859][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.616895][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.656293][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.670310][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.686425][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.695795][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.710437][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.742371][ T4190] device veth0_macvtap entered promiscuous mode [ 71.775886][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.795255][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.808247][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.831233][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.856811][ T4190] device veth1_macvtap entered promiscuous mode [ 71.869237][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.878674][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.887221][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.898209][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.909939][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.918386][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.931224][ T4188] device veth0_vlan entered promiscuous mode [ 71.971156][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.980384][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 71.992398][ T4188] device veth1_vlan entered promiscuous mode [ 72.010514][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.027017][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 72.033850][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 72.045391][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.056253][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.063133][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 72.072876][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.085501][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.111761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.125395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.137016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.146202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.157860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.167239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.176896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.186839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.197538][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.208710][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.219729][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.230590][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.242225][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.257228][ T4189] device veth0_vlan entered promiscuous mode [ 72.264739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.275168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.292306][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.301285][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310617][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.319724][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334590][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.343919][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.359075][ T4189] device veth1_vlan entered promiscuous mode [ 72.388321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.397255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.417958][ T4188] device veth0_macvtap entered promiscuous mode [ 72.445552][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.448520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.466584][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.475461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.486356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.498665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.511472][ T4188] device veth1_macvtap entered promiscuous mode [ 72.587242][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.600187][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.613128][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.624641][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.635446][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.646673][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.658608][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.683225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.694819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.704440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.731512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.764980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.806594][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.821980][ T4276] loop1: detected capacity change from 0 to 256 [ 72.830606][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.840789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.853635][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.863608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.874418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.886432][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.900262][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.908164][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.912728][ T4276] ======================================================= [ 72.912728][ T4276] WARNING: The mand mount option has been deprecated and [ 72.912728][ T4276] and is ignored by this kernel. Remove the mand [ 72.912728][ T4276] option from the mount to silence this warning. [ 72.912728][ T4276] ======================================================= [ 72.964006][ T4276] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.977302][ T4276] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 72.994164][ T4189] device veth0_macvtap entered promiscuous mode [ 73.009770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.021592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.030422][ T4276] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.044793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.057984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.077887][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.089754][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.098598][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.108334][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.141182][ T4189] device veth1_macvtap entered promiscuous mode [ 73.150170][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.158486][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.224520][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.245964][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.262266][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.289133][ T4281] input: syz0 as /devices/virtual/input/input5 [ 73.294629][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.308231][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.336128][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.353148][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.364599][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.374570][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.385885][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.406207][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.424727][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.442682][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.457015][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.468827][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.479678][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.492845][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.503078][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.514684][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.526839][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.578363][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.605700][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.635600][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.675390][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.689917][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.706376][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.719800][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769097][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.815419][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.929818][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.962965][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.980833][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.993405][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.024554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.050727][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 74.057322][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 74.064438][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 74.121979][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.142389][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 74.148868][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 74.150286][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.169605][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 74.188500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.222006][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.222668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.239321][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.254103][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.263173][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.291603][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 74.317547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.328375][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.355711][ T1107] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.361319][ T4303] input: syz0 as /devices/virtual/input/input6 [ 74.424842][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 74.441236][ T1107] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 74.454277][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 74.466355][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.506611][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.529232][ T1107] usb 2-1: config 0 descriptor?? [ 74.628880][ T4204] Bluetooth: hci5: urb ffff8881423d0600 submission failed (90) [ 74.690658][ T4233] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 74.810227][ T4234] usb 2-1: USB disconnect, device number 2 [ 74.840424][ T4230] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.848125][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.059606][ T4233] usb 5-1: config index 0 descriptor too short (expected 561, got 49) [ 75.068239][ T4233] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 75.076940][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.087297][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 75.097510][ T4233] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 75.108015][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.120550][ T4233] usb 5-1: config 0 descriptor?? [ 75.177131][ T4233] usb 5-1: bad CDC descriptors [ 75.184714][ T4233] usb 5-1: bad CDC descriptors [ 75.260356][ T4230] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 75.270392][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 75.280083][ T4230] usb 1-1: config 0 has no interface number 0 [ 75.286349][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.296361][ T7] usb 3-1: config 0 descriptor?? [ 75.352000][ T7] cp210x 3-1:0.0: cp210x converter detected [ 75.392703][ T4234] usb 5-1: USB disconnect, device number 2 [ 75.643841][ T4230] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 75.663146][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 75.684697][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.918953][ T4230] usb 1-1: Product: syz [ 76.050266][ T4230] usb 1-1: Manufacturer: syz [ 76.168638][ T4230] usb 1-1: SerialNumber: syz [ 76.333238][ T4230] usb 1-1: config 0 descriptor?? [ 76.464539][ T4335] loop4: detected capacity change from 0 to 128 [ 76.487332][ T4337] loop1: detected capacity change from 0 to 1024 [ 76.533016][ T4335] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 76.551067][ T4337] hfsplus: Filesystem is marked locked, mounting read-only. [ 76.570129][ T4335] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.721239][ T4230] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 76.735311][ T4230] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 76.773251][ T4230] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 76.789022][ T4230] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 76.801217][ T4230] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 76.809317][ T4348] loop3: detected capacity change from 0 to 512 [ 76.839913][ T4348] EXT4-fs (loop3): Ignoring removed orlov option [ 76.881930][ T4335] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.890202][ T4348] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 76.906796][ T4335] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.964115][ T4348] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.26: corrupted in-inode xattr [ 77.029047][ T4348] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.26: couldn't read orphan inode 15 (err -117) [ 77.049465][ T4348] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 77.447385][ T4232] usb 3-1: USB disconnect, device number 2 [ 77.528205][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.568150][ T4232] cp210x 3-1:0.0: device disconnected [ 78.022679][ T4176] blk_update_request: I/O error, dev loop7, sector 4644337124114304 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.326249][ T4176] blk_update_request: I/O error, dev loop7, sector 4644337124114304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.428123][ T4386] loop3: detected capacity change from 0 to 8 [ 78.439691][ T4176] Buffer I/O error on dev loop7p4, logical block 17592187092976, async page read [ 78.451714][ T1107] usb 1-1: USB disconnect, device number 2 [ 78.462668][ T1107] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 78.473322][ T1107] keyspan 1-1:0.133: device disconnected [ 78.516173][ T4391] loop4: detected capacity change from 0 to 128 [ 78.608673][ T4386] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.711078][ T4234] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1 [ 78.720209][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 78.722736][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 78.728118][ T4234] hid-generic: probe of 0005:0007:0007.0001 failed with error -22 [ 78.738347][ T4386] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.738717][ T4386] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.739011][ T4386] SQUASHFS error: Unable to read inode 0x127 [ 78.756694][ T4396] device dummy0 entered promiscuous mode [ 78.756844][ T4396] device macsec1 entered promiscuous mode [ 78.929640][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.119389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.129412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.139390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.149388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.159390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.169396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.179397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.189392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.199394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.209721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.549778][ T4232] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 80.589500][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.635336][ T4232] usb 3-1: Product: syz [ 80.643424][ T4412] loop4: detected capacity change from 0 to 256 [ 80.675519][ T4232] usb 3-1: Manufacturer: syz [ 80.699450][ T4232] usb 3-1: SerialNumber: syz [ 80.721363][ T4232] usb 3-1: config 0 descriptor?? [ 80.742871][ T4413] loop0: detected capacity change from 0 to 512 [ 80.799050][ T4410] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by " [ 80.871145][ T4412] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.943484][ T4232] ch341 3-1:0.0: ch341-uart converter detected [ 81.027112][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.106155][ T4413] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 81.278363][ T4393] loop2: detected capacity change from 0 to 1024 [ 81.387482][ T4393] EXT4-fs (loop2): barriers disabled [ 81.407417][ T4393] JBD2: no valid journal superblock found [ 81.443148][ T4430] loop0: detected capacity change from 0 to 128 [ 81.469509][ T4393] EXT4-fs (loop2): error loading journal [ 81.627725][ T4232] usb 3-1: failed to send control message: -71 [ 81.634268][ T4232] ch341-uart: probe of ttyUSB0 failed with error -71 [ 81.654905][ T4232] usb 3-1: USB disconnect, device number 3 [ 81.662883][ T4232] ch341 3-1:0.0: device disconnected [ 82.674175][ T4438] loop4: detected capacity change from 0 to 4096 [ 82.899304][ T4438] EXT4-fs (loop4): blocks per group (512) and clusters per group (32768) inconsistent [ 83.977000][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 83.979137][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 83.996524][ T4447] device dummy0 entered promiscuous mode [ 83.996991][ T4447] device macsec1 entered promiscuous mode [ 84.867687][ T4457] loop1: detected capacity change from 0 to 256 [ 84.902588][ T4459] bridge0: port 3(syz_tun) entered blocking state [ 84.939501][ T4459] bridge0: port 3(syz_tun) entered disabled state [ 84.948723][ T4459] device syz_tun entered promiscuous mode [ 84.985849][ T4461] capability: warning: `syz.4.57' uses deprecated v2 capabilities in a way that may be insecure [ 85.004750][ T4459] bridge0: port 3(syz_tun) entered blocking state [ 85.011660][ T4459] bridge0: port 3(syz_tun) entered forwarding state [ 85.050349][ T4457] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 85.202910][ T4470] loop4: detected capacity change from 0 to 512 [ 85.218587][ T4468] loop2: detected capacity change from 0 to 512 [ 85.243305][ T4469] netlink: 'syz.0.56': attribute type 8 has an invalid length. [ 85.282211][ T4472] loop1: detected capacity change from 0 to 512 [ 85.300480][ T4470] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 85.300480][ T4470] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.300480][ T4470] [ 85.337045][ T4468] EXT4-fs (loop2): Ignoring removed orlov option [ 85.352476][ T4472] EXT4-fs (loop1): Ignoring removed orlov option [ 85.360168][ T4468] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 85.377530][ T4470] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.60: inode has both inline data and extents flags [ 85.387224][ T4472] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 85.413479][ T4472] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.61: corrupted in-inode xattr [ 85.454150][ T4468] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.59: corrupted in-inode xattr [ 85.484188][ T4470] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.60: couldn't read orphan inode 15 (err -117) [ 85.511541][ T4468] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.59: couldn't read orphan inode 15 (err -117) [ 85.532088][ T4468] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 85.588263][ T4470] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,,errors=continue. Quota mode: writeback. [ 85.601404][ T4472] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.61: couldn't read orphan inode 15 (err -117) [ 85.621620][ T4478] loop0: detected capacity change from 0 to 8192 [ 85.640443][ T4472] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 85.666084][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.196540][ T4483] Zero length message leads to an empty skb [ 86.777671][ T1325] cfg80211: failed to load regulatory.db [ 86.947850][ T4490] loop4: detected capacity change from 0 to 512 [ 87.013752][ T4490] EXT4-fs (loop4): Ignoring removed oldalloc option [ 87.060713][ T4490] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 87.132372][ T4490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.209958][ T4490] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 87.266433][ T4490] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 87.274184][ T4490] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.65: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 87.299598][ T4490] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.65: couldn't read orphan inode 13 (err -117) [ 87.317427][ T4490] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noblock_validity,nobarrier,debug,oldalloc,journal_ioprio=0x0000000000000006,grpid,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 87.427376][ T4490] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.65: deleted inode referenced: 12 [ 87.744107][ T4507] loop2: detected capacity change from 0 to 512 [ 87.777311][ T4510] loop0: detected capacity change from 0 to 512 [ 87.853068][ T4510] EXT4-fs (loop0): Ignoring removed orlov option [ 87.876695][ T4510] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 87.913096][ T4507] EXT4-fs (loop2): Ignoring removed orlov option [ 87.919888][ T4507] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 87.939076][ T4510] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.74: corrupted in-inode xattr [ 87.995641][ T4507] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.73: corrupted in-inode xattr [ 87.996980][ T4515] loop4: detected capacity change from 0 to 8192 [ 88.018250][ T4510] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.74: couldn't read orphan inode 15 (err -117) [ 88.049989][ T4507] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.73: couldn't read orphan inode 15 (err -117) [ 88.083814][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 88.120045][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 90.178417][ T4527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 90.227007][ T4531] loop1: detected capacity change from 0 to 512 [ 90.255301][ T4531] EXT4-fs (loop1): Ignoring removed orlov option [ 90.316813][ T4531] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 90.411700][ T4531] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.81: corrupted in-inode xattr [ 90.444164][ T4531] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 90.487587][ T4531] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 90.598132][ T4538] loop4: detected capacity change from 0 to 512 [ 90.615858][ T4536] loop0: detected capacity change from 0 to 256 [ 90.674725][ T4536] exfat: Deprecated parameter 'utf8' [ 90.705913][ T4536] exfat: Deprecated parameter 'namecase' [ 90.736396][ T4536] exfat: Deprecated parameter 'utf8' [ 90.761580][ T4536] exfat: Bad value for 'gid' [ 90.838955][ T4538] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 90.878775][ T4538] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 91.038450][ T4538] EXT4-fs (loop4): 1 truncate cleaned up [ 91.119684][ T4538] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 92.548273][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 92.600862][ T4552] loop3: detected capacity change from 0 to 2048 [ 92.608377][ T4558] loop1: detected capacity change from 0 to 512 [ 92.625146][ T4541] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 92.646363][ T4552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.771695][ T4560] loop2: detected capacity change from 0 to 8192 [ 92.778758][ T4558] EXT4-fs (loop1): Ignoring removed orlov option [ 92.805275][ T4558] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 92.955653][ T4558] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.89: corrupted in-inode xattr [ 93.055262][ T4558] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.89: couldn't read orphan inode 15 (err -117) [ 93.292060][ T4558] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 94.396516][ T4189] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 94.413149][ T4575] loop2: detected capacity change from 0 to 1024 [ 94.420214][ T4189] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 94.688210][ T4575] hfsplus: bad catalog folder thread [ 95.133875][ T4585] loop2: detected capacity change from 0 to 256 [ 95.264587][ T4585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 95.469331][ T4592] loop1: detected capacity change from 0 to 8 [ 95.493381][ T4594] loop2: detected capacity change from 0 to 16 [ 95.564774][ T4592] squashfs: Unknown parameter 'ÿlËÀŒÂeK9…j(DãÅ÷­9F&Z•' [ 95.589925][ T4594] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.991655][ T4598] erofs: (device loop2): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 96.910795][ T4602] loop1: detected capacity change from 0 to 512 [ 96.993671][ T4602] EXT4-fs (loop1): Ignoring removed orlov option [ 97.075288][ T4602] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 97.121408][ T4595] chnl_net:caif_netlink_parms(): no params data found [ 97.203960][ T4602] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.105: corrupted in-inode xattr [ 97.325662][ T4602] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.105: couldn't read orphan inode 15 (err -117) [ 97.419006][ T4602] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 97.809729][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 98.834169][ T4629] loop4: detected capacity change from 0 to 256 [ 98.890776][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.929752][ T4629] exfat: Deprecated parameter 'utf8' [ 98.935230][ T4629] exfat: Deprecated parameter 'namecase' [ 98.979588][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.007260][ T4629] exfat: Deprecated parameter 'utf8' [ 99.019478][ T4595] device bridge_slave_0 entered promiscuous mode [ 99.045038][ T4637] loop2: detected capacity change from 0 to 16 [ 99.051641][ T4629] exfat: Bad value for 'gid' [ 99.070400][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.077600][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.086586][ T4595] device bridge_slave_1 entered promiscuous mode [ 99.122503][ T4637] erofs: (device loop2): mounted with root inode @ nid 36. [ 99.385131][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.496695][ T4643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.729604][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 100.772684][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.373174][ T4595] team0: Port device team_slave_0 added [ 101.460535][ T4595] team0: Port device team_slave_1 added [ 101.556359][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.580330][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.694368][ T4595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.733065][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.749775][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.813190][ T4662] process 'syz.2.124' launched './file0' with NULL argv: empty string added [ 101.854643][ T4595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.012755][ T4667] loop2: detected capacity change from 0 to 512 [ 102.048123][ T4667] EXT4-fs (loop2): Ignoring removed bh option [ 102.121743][ T4595] device hsr_slave_0 entered promiscuous mode [ 102.146716][ T4667] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 102.167836][ T4595] device hsr_slave_1 entered promiscuous mode [ 102.177552][ T4595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.192202][ T4667] EXT4-fs (loop2): 1 truncate cleaned up [ 102.197913][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 102.208492][ T4595] Cannot create hsr debugfs directory [ 102.989909][ T26] audit: type=1800 audit(1783626612.737:2): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 103.040737][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 103.050719][ T4667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.127: bg 0: block 465: padding at end of block bitmap is not set [ 103.112816][ T4667] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 103.134133][ T4667] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.134133][ T4667] [ 103.149708][ T4667] EXT4-fs (loop2): Total free blocks count 0 [ 103.156750][ T4667] EXT4-fs (loop2): Free/Dirty block details [ 103.175240][ T4667] EXT4-fs (loop2): free_blocks=0 [ 103.185404][ T4667] EXT4-fs (loop2): dirty_blocks=2 [ 103.193254][ T4667] EXT4-fs (loop2): Block reservation details [ 103.204428][ T4667] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 103.561714][ T4679] mmap: syz.2.130 (4679) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 104.323881][ T26] audit: type=1804 audit(1783626614.097:3): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.130" name="bus" dev="ramfs" ino=34172 res=1 errno=0 [ 104.567555][ T4595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.613324][ T4595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.099555][ T4647] Bluetooth: hci2: command 0x0419 tx timeout [ 105.413263][ T4595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.510712][ T4595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.705018][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.844847][ T4706] loop4: detected capacity change from 0 to 1024 [ 106.149131][ T4706] hfsplus: cannot replace xattr [ 106.171872][ T4706] hfsplus: xattr searching failed [ 106.910398][ T3022] hfsplus: b-tree write err: -5, ino 3 [ 107.437493][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.453058][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.498923][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.286981][ T4595] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.330217][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.346933][ T4728] loop2: detected capacity change from 0 to 256 [ 109.354107][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.391928][ T4732] loop4: detected capacity change from 0 to 128 [ 109.398892][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.406043][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.450071][ T4728] exfat: Deprecated parameter 'utf8' [ 109.455456][ T4728] exfat: Deprecated parameter 'namecase' [ 109.466314][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.479848][ T4728] exfat: Deprecated parameter 'utf8' [ 109.486137][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.496781][ T4728] exfat: Bad value for 'gid' [ 109.528759][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.560078][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.567193][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.597883][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.808859][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.894824][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.924867][ T4739] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.462845][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.714956][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.776521][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.824732][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.863167][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.881020][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.923548][ T4595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.954718][ T4746] loop4: detected capacity change from 0 to 164 [ 110.970357][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.987622][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.020391][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.339722][ T4746] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.017514][ T4448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.061535][ T4756] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.262995][ T4448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.283467][ T4764] loop1: detected capacity change from 0 to 512 [ 113.982142][ T4448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.079906][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.668314][ T4764] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.157: iget: bad i_size value: 38620345925642 [ 114.694820][ T4778] loop2: detected capacity change from 0 to 256 [ 114.727263][ T4764] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 114.745346][ T4448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.752177][ T4778] exfat: Deprecated parameter 'utf8' [ 114.785264][ T4764] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.791501][ T4778] exfat: Deprecated parameter 'namecase' [ 114.841083][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.858868][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.860964][ T4778] exfat: Deprecated parameter 'utf8' [ 114.892993][ T4595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.909665][ T4778] exfat: Bad value for 'gid' [ 114.917881][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 115.279435][ T4784] loop1: detected capacity change from 0 to 128 [ 115.323345][ T4785] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.741889][ T4784] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 116.290060][ T4233] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 116.299191][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.308562][ T4233] usb 1-1: Product: syz [ 116.336923][ T4792] loop2: detected capacity change from 0 to 256 [ 116.379504][ T4233] usb 1-1: can't set config #1, error -71 [ 116.409550][ T4233] usb 1-1: USB disconnect, device number 3 [ 116.486292][ T4794] loop0: detected capacity change from 0 to 256 [ 116.680983][ T4794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 116.817404][ T4800] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 117.365144][ T4804] loop1: detected capacity change from 0 to 1024 [ 117.394607][ T26] audit: type=1800 audit(1783626627.147:4): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.165" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 117.461232][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.490935][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.721303][ T4595] device veth0_vlan entered promiscuous mode [ 117.785426][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.800714][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.068836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.110840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.299039][ T4595] device veth1_vlan entered promiscuous mode [ 118.429838][ T4595] device veth0_macvtap entered promiscuous mode [ 118.536367][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.565488][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.617056][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.626762][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.693432][ T4595] device veth1_macvtap entered promiscuous mode [ 118.777175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.319585][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.389769][ T4829] loop1: detected capacity change from 0 to 512 [ 119.401820][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.447433][ T4829] EXT4-fs (loop1): Ignoring removed orlov option [ 119.494519][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.507493][ T4829] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 119.587629][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.606201][ T4829] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.171: corrupted in-inode xattr [ 119.619454][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.630125][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.640101][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.652590][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.663010][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.673624][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.684134][ T4829] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.171: couldn't read orphan inode 15 (err -117) [ 119.686965][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.717197][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.747657][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.769009][ T4829] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 119.798726][ T4839] loop2: detected capacity change from 0 to 256 [ 119.827534][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.840095][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.851899][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.864872][ T26] audit: type=1804 audit(1783626629.637:5): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.174" name="bus" dev="ramfs" ino=35462 res=1 errno=0 [ 119.885949][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.897002][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.909411][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.921736][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.933385][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.944080][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.957393][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.977256][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.990199][ T4839] exfat: Deprecated parameter 'utf8' [ 119.996065][ T4839] exfat: Deprecated parameter 'namecase' [ 120.011104][ T4292] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 120.023927][ T4839] exfat: Deprecated parameter 'utf8' [ 120.029284][ T4839] exfat: Bad value for 'gid' [ 120.046929][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.080383][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.287742][ T4595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.349641][ T4595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.423029][ T4854] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.477672][ T4292] usb 1-1: Invalid ep0 maxpacket: 16 [ 123.273111][ T4595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.507410][ T4595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.833574][ T26] audit: type=1804 audit(1783626633.607:6): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.184" name="bus" dev="ramfs" ino=35511 res=1 errno=0 [ 124.014479][ T4865] loop2: detected capacity change from 0 to 2048 [ 124.114986][ T4569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.170478][ T4865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.182564][ T4569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.268124][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.345045][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.379233][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.397611][ T4448] device hsr_slave_0 left promiscuous mode [ 124.424905][ T4448] device hsr_slave_1 left promiscuous mode [ 124.432441][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.447410][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.489055][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.528583][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.556964][ T4448] device bridge_slave_1 left promiscuous mode [ 124.605907][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.687272][ T4448] device bridge_slave_0 left promiscuous mode [ 124.732296][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.826632][ T4894] loop0: detected capacity change from 0 to 512 [ 125.870575][ T4448] device veth1_macvtap left promiscuous mode [ 125.878133][ T4448] device veth0_macvtap left promiscuous mode [ 125.900665][ T4894] EXT4-fs (loop0): Test dummy encryption mode enabled [ 125.907532][ T4894] EXT4-fs (loop0): Ignoring removed oldalloc option [ 125.941608][ T4448] device veth1_vlan left promiscuous mode [ 125.947731][ T4448] device veth0_vlan left promiscuous mode [ 126.006550][ T4894] EXT4-fs (loop0): 1 truncate cleaned up [ 126.056866][ T4894] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 126.161198][ T4914] loop4: detected capacity change from 0 to 2048 [ 126.218944][ T4919] loop2: detected capacity change from 0 to 16 [ 126.233730][ T4914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.273790][ T4919] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.535186][ T26] audit: type=1804 audit(1783626636.307:7): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.198" name="bus" dev="ramfs" ino=35859 res=1 errno=0 [ 127.133494][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 127.177250][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 127.226820][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.275089][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.489184][ T4448] bond0 (unregistering): Released all slaves [ 127.579907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.967476][ T4941] loop1: detected capacity change from 0 to 1024 [ 128.449412][ T4941] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,noauto_da_alloc,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,bsddf,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 128.921070][ T4956] loop5: detected capacity change from 0 to 2048 [ 128.949271][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 129.010257][ T4956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.520517][ T4974] loop1: detected capacity change from 0 to 1024 [ 132.339846][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 132.340966][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 132.357778][ T4990] device dummy0 entered promiscuous mode [ 132.357892][ T4990] device macsec1 entered promiscuous mode [ 132.676547][ T4998] loop0: detected capacity change from 0 to 16 [ 132.696382][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702785][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.767181][ T4998] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.843975][ T5005] loop2: detected capacity change from 0 to 1024 [ 132.909697][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.818833][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.864903][ T5012] loop5: detected capacity change from 0 to 2048 [ 133.937242][ T5012] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 134.000596][ T4253] hfsplus: found bad thread record in catalog [ 134.009702][ T5012] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.089414][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 134.179899][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.222485][ T1325] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.236368][ T4231] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.271954][ T4231] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.309472][ T4231] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 134.341880][ T5020] loop5: detected capacity change from 0 to 2048 [ 134.368759][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.389638][ T1325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.405101][ T4231] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.421433][ T5020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.430456][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 134.438513][ T1325] usb 5-1: SerialNumber: syz [ 134.459260][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.530033][ T4231] usb 2-1: config 0 descriptor?? [ 134.649304][ T5030] loop2: detected capacity change from 0 to 512 [ 134.716687][ T5032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.229'. [ 134.819819][ T5030] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 134.850371][ T5030] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.021249][ T4231] hid (null): invalid report_size 29285 [ 135.036312][ T4231] hid (null): unknown global tag 0xc [ 135.053580][ T4231] hid (null): report_id 0 is invalid [ 135.329524][ T26] audit: type=1800 audit(1783626645.057:8): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 135.694903][ T4595] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 135.735556][ T4595] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 135.830612][ T4231] usb 2-1: USB disconnect, device number 3 [ 135.841016][ T1325] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 135.908490][ T1325] usb 5-1: USB disconnect, device number 3 [ 135.932945][ T1325] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 136.035504][ T5049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.233'. [ 136.187733][ T5055] loop4: detected capacity change from 0 to 512 [ 136.317463][ T5055] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.390873][ T5068] loop1: detected capacity change from 0 to 256 [ 136.402176][ T5071] loop0: detected capacity change from 0 to 256 [ 136.409779][ T5055] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 136.421545][ T5055] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.234: invalid indirect mapped block 2683928664 (level 1) [ 136.440880][ T5055] EXT4-fs (loop4): 1 truncate cleaned up [ 136.446588][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noauto_da_alloc,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 136.476872][ T5055] EXT4-fs warning (device loop4): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 136.542915][ T5071] FAT-fs (loop0): Unrecognized mount option ")û"Kmtail=0" or missing value [ 136.649939][ T5068] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 136.724167][ T5071] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005ÿÿchar [ 137.306377][ T5085] loop0: detected capacity change from 0 to 1764 [ 137.905101][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 137.905996][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 138.111458][ T4193] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.349615][ T4193] usb 5-1: Using ep0 maxpacket: 32 [ 138.469593][ T4193] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 50, changing to 9 [ 138.841072][ T4193] usb 5-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 138.850308][ T4193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.858334][ T4193] usb 5-1: Product: syz [ 138.873127][ T4193] usb 5-1: Manufacturer: syz [ 138.877826][ T4193] usb 5-1: SerialNumber: syz [ 138.901067][ T5120] loop0: detected capacity change from 0 to 2048 [ 139.678986][ T4193] usb 5-1: invalid MIDI in EP 0 [ 139.684676][ T5120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.990169][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 140.036717][ T4193] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 140.161819][ T4193] usb 5-1: USB disconnect, device number 4 [ 140.289470][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 140.421455][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.457788][ T5159] device syzkaller0 entered promiscuous mode [ 140.624249][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 140.839090][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 140.895465][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.043818][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.191385][ T5095] device bridge_slave_0 entered promiscuous mode [ 141.232565][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.240194][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.248813][ T5095] device bridge_slave_1 entered promiscuous mode [ 141.254922][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 141.281503][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.293664][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.295932][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 141.335837][ T5095] team0: Port device team_slave_0 added [ 141.345065][ T5095] team0: Port device team_slave_1 added [ 141.367974][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.375281][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.401483][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.589668][ T4188] bridge0: port 3(syz_tun) entered disabled state [ 141.664686][ T4188] device syz_tun left promiscuous mode [ 141.677345][ T4188] bridge0: port 3(syz_tun) entered disabled state [ 143.067988][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 143.634313][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.641549][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.668018][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.887148][ T5095] device hsr_slave_0 entered promiscuous mode [ 143.916408][ T5095] device hsr_slave_1 entered promiscuous mode [ 143.968567][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.992287][ T5095] Cannot create hsr debugfs directory [ 144.325734][ T4448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.734607][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 145.845729][ T4448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.678236][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 147.701079][ T5215] device syzkaller0 entered promiscuous mode [ 147.718809][ T5219] bridge0: port 3(syz_tun) entered blocking state [ 147.727205][ T5219] bridge0: port 3(syz_tun) entered disabled state [ 147.744110][ T5219] device syz_tun entered promiscuous mode [ 147.757643][ T5219] bridge0: port 3(syz_tun) entered blocking state [ 147.764248][ T5219] bridge0: port 3(syz_tun) entered forwarding state [ 147.808949][ T4448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.819463][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 147.829238][ T5226] loop4: detected capacity change from 0 to 256 [ 147.843557][ T5223] netlink: 'syz.2.281': attribute type 8 has an invalid length. [ 147.871438][ T5226] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 147.976261][ T4448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.034331][ T5226] loop4: detected capacity change from 0 to 2048 [ 148.192397][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.283216][ T4448] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.354364][ T5209] chnl_net:caif_netlink_parms(): no params data found [ 148.682376][ T4448] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.540137][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.547698][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.556388][ T5209] device bridge_slave_0 entered promiscuous mode [ 149.565232][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.572374][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.592937][ T5209] device bridge_slave_1 entered promiscuous mode [ 149.691171][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 149.771616][ T4448] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.772128][ T5262] loop1: detected capacity change from 0 to 16 [ 149.818598][ T5264] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.832413][ T5209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.844970][ T5262] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.875929][ T5209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.889538][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.064334][ T4448] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.331977][ T5269] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 150.473565][ T5209] team0: Port device team_slave_0 added [ 150.699220][ T5209] team0: Port device team_slave_1 added [ 150.833393][ T5095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.882105][ T5095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.960936][ T5209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.978203][ T5209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.991789][ T1107] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 151.029390][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.049727][ T1107] usb 5-1: config 0 has no interface number 0 [ 151.056016][ T1107] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 151.067994][ T5209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.096597][ T1107] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.110884][ T5095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.174143][ T5095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.275877][ T5279] netlink: 'syz.2.293': attribute type 8 has an invalid length. [ 151.280347][ T1107] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 151.332587][ T5209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.340407][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.360039][ T5209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.393841][ T1107] usb 5-1: Product: syz [ 151.398067][ T1107] usb 5-1: Manufacturer: syz [ 151.445898][ T1107] usb 5-1: SerialNumber: syz [ 151.479070][ T1107] usb 5-1: config 0 descriptor?? [ 151.508426][ T5209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.650624][ T5292] loop1: detected capacity change from 0 to 1024 [ 151.739822][ T1325] Bluetooth: hci1: command 0x041b tx timeout [ 151.773654][ T5209] device hsr_slave_0 entered promiscuous mode [ 151.789512][ T5209] device hsr_slave_1 entered promiscuous mode [ 151.796448][ T5209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.839609][ T5209] Cannot create hsr debugfs directory [ 152.190519][ T1107] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 152.526756][ T1107] usb 5-1: USB disconnect, device number 5 [ 153.097257][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.192940][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.205200][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.235675][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.290807][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.311094][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.328886][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.336198][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.349533][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.411145][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.427850][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.447595][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.458114][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.465300][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.485612][ T5328] netlink: 'syz.2.304': attribute type 8 has an invalid length. [ 153.507797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.570447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.592401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.600280][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 153.616041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.633460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.645596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.678310][ T5095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.709192][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.728906][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.745914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.751822][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.763484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.777848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.793018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.803239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.812119][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 153.853878][ T5209] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 153.865510][ T5209] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 153.918831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.938260][ T5209] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 153.945645][ T1107] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.961234][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.975208][ T1107] usb 5-1: Product: syz [ 153.982036][ T1107] usb 5-1: Manufacturer: syz [ 153.986847][ T1107] usb 5-1: SerialNumber: syz [ 154.001758][ T5209] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.096756][ T5338] loop1: detected capacity change from 0 to 256 [ 154.178105][ T5338] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.189462][ T5338] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 154.216369][ T5338] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.324827][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.346674][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.350492][ T1107] usb 5-1: 0:2 : does not exist [ 154.367940][ T1107] usb 5-1: unit 9 not found! [ 154.403829][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.464187][ T5209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.479398][ T5349] Illegal XDP return value 4294967294, expect packet loss! [ 154.492655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.516997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.557546][ T5209] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.590139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.599861][ T1107] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 154.622442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.656266][ T1107] usb 5-1: USB disconnect, device number 6 [ 154.665695][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.672826][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.932647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.955678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.026034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.058580][ T5364] [ 155.060961][ T5364] ====================================================== [ 155.067995][ T5364] WARNING: possible circular locking dependency detected [ 155.075055][ T5364] syzkaller #0 Not tainted [ 155.079492][ T5364] ------------------------------------------------------ [ 155.086528][ T5364] syz.4.311/5364 is trying to acquire lock: [ 155.092872][ T5364] ffff888022585028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 155.103974][ T5364] [ 155.103974][ T5364] but task is already holding lock: [ 155.111354][ T5364] ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 155.121042][ T5364] [ 155.121042][ T5364] which lock already depends on the new lock. [ 155.121042][ T5364] [ 155.131464][ T5364] [ 155.131464][ T5364] the existing dependency chain (in reverse order) is: [ 155.140508][ T5364] [ 155.140508][ T5364] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 155.148545][ T5364] __mutex_lock_common+0x1e5/0x2400 [ 155.154315][ T5364] mutex_lock_nested+0x17/0x20 [ 155.159630][ T5364] rfkill_register+0x2f/0x970 [ 155.164854][ T5364] hci_register_dev+0x459/0x980 [ 155.170253][ T5364] vhci_create_device+0x32e/0x5c0 [ 155.175843][ T5364] vhci_write+0x389/0x440 [ 155.180722][ T5364] vfs_write+0x748/0xd70 [ 155.185510][ T5364] ksys_write+0x153/0x260 [ 155.190387][ T5364] do_syscall_64+0x4c/0xa0 [ 155.195347][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.201781][ T5364] [ 155.201781][ T5364] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 155.209628][ T5364] __mutex_lock_common+0x1e5/0x2400 [ 155.215380][ T5364] mutex_lock_nested+0x17/0x20 [ 155.220689][ T5364] vhci_send_frame+0x88/0x100 [ 155.225918][ T5364] hci_send_frame+0x1a9/0x2e0 [ 155.231140][ T5364] hci_tx_work+0x9b5/0x16d0 [ 155.236184][ T5364] process_one_work+0x867/0xff0 [ 155.241578][ T5364] worker_thread+0xad7/0x12a0 [ 155.246798][ T5364] kthread+0x42e/0x520 [ 155.251405][ T5364] ret_from_fork+0x1f/0x30 [ 155.256365][ T5364] [ 155.256365][ T5364] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 155.265599][ T5364] __flush_work+0x116/0x210 [ 155.270649][ T5364] hci_dev_do_close+0x201/0x1020 [ 155.276130][ T5364] hci_unregister_dev+0x2eb/0x590 [ 155.281695][ T5364] vhci_release+0x73/0xc0 [ 155.286572][ T5364] __fput+0x212/0x8c0 [ 155.291101][ T5364] task_work_run+0x125/0x1a0 [ 155.296235][ T5364] do_exit+0x635/0x2110 [ 155.300927][ T5364] do_group_exit+0x12c/0x2f0 [ 155.306063][ T5364] __x64_sys_exit_group+0x3b/0x40 [ 155.311622][ T5364] do_syscall_64+0x4c/0xa0 [ 155.316579][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.323016][ T5364] [ 155.323016][ T5364] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 155.330701][ T5364] __mutex_lock_common+0x1e5/0x2400 [ 155.336454][ T5364] mutex_lock_nested+0x17/0x20 [ 155.341768][ T5364] bg_scan_update+0x44/0x3b0 [ 155.346907][ T5364] process_one_work+0x867/0xff0 [ 155.352303][ T5364] worker_thread+0xad7/0x12a0 [ 155.357531][ T5364] kthread+0x42e/0x520 [ 155.362145][ T5364] ret_from_fork+0x1f/0x30 [ 155.367106][ T5364] [ 155.367106][ T5364] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 155.376953][ T5364] __lock_acquire+0x2c66/0x7b50 [ 155.382359][ T5364] lock_acquire+0x19e/0x400 [ 155.387406][ T5364] __flush_work+0x116/0x210 [ 155.392450][ T5364] __cancel_work_timer+0x3f4/0x560 [ 155.398106][ T5364] hci_request_cancel_all+0xcc/0x300 [ 155.404016][ T5364] hci_dev_do_close+0x4e/0x1020 [ 155.409491][ T5364] hci_rfkill_set_block+0x101/0x180 [ 155.415257][ T5364] rfkill_set_block+0x1c1/0x3c0 [ 155.420650][ T5364] rfkill_fop_write+0x453/0x560 [ 155.426049][ T5364] vfs_write+0x304/0xd70 [ 155.430841][ T5364] ksys_write+0x153/0x260 [ 155.435816][ T5364] do_syscall_64+0x4c/0xa0 [ 155.440773][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.447213][ T5364] [ 155.447213][ T5364] other info that might help us debug this: [ 155.447213][ T5364] [ 155.457456][ T5364] Chain exists of: [ 155.457456][ T5364] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 155.457456][ T5364] [ 155.473218][ T5364] Possible unsafe locking scenario: [ 155.473218][ T5364] [ 155.480682][ T5364] CPU0 CPU1 [ 155.486060][ T5364] ---- ---- [ 155.491438][ T5364] lock(rfkill_global_mutex); [ 155.496228][ T5364] lock(&data->open_mutex); [ 155.503386][ T5364] lock(rfkill_global_mutex); [ 155.510691][ T5364] lock((work_completion)(&hdev->bg_scan_update)); [ 155.517304][ T5364] [ 155.517304][ T5364] *** DEADLOCK *** [ 155.517304][ T5364] [ 155.525456][ T5364] 1 lock held by syz.4.311/5364: [ 155.530407][ T5364] #0: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 155.540540][ T5364] [ 155.540540][ T5364] stack backtrace: [ 155.546448][ T5364] CPU: 1 PID: 5364 Comm: syz.4.311 Not tainted syzkaller #0 [ 155.553751][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.563840][ T5364] Call Trace: [ 155.567140][ T5364] [ 155.570092][ T5364] dump_stack_lvl+0x188/0x250 [ 155.574803][ T5364] ? load_image+0x410/0x410 [ 155.579851][ T5364] ? show_regs_print_info+0x20/0x20 [ 155.585074][ T5364] ? print_circular_bug+0x12b/0x1a0 [ 155.590295][ T5364] check_noncircular+0x296/0x330 [ 155.595266][ T5364] ? look_up_lock_class+0x71/0x110 [ 155.600553][ T5364] ? add_chain_block+0x9b0/0x9b0 [ 155.605611][ T5364] ? lockdep_lock+0xf1/0x1f0 [ 155.610360][ T5364] ? mark_lock+0x94/0x320 [ 155.614723][ T5364] ? _find_first_zero_bit+0xd1/0xf0 [ 155.619957][ T5364] __lock_acquire+0x2c66/0x7b50 [ 155.624939][ T5364] ? __lock_acquire+0x7b50/0x7b50 [ 155.630007][ T5364] ? verify_lock_unused+0x140/0x140 [ 155.635248][ T5364] ? lockdep_hardirqs_on+0x94/0x140 [ 155.640480][ T5364] ? finish_lock_switch+0x12d/0x290 [ 155.645726][ T5364] ? finish_task_switch+0x12f/0x650 [ 155.650969][ T5364] ? __schedule+0x11cb/0x4350 [ 155.655681][ T5364] lock_acquire+0x19e/0x400 [ 155.660315][ T5364] ? __flush_work+0xfa/0x210 [ 155.664942][ T5364] ? read_lock_is_recursive+0x10/0x10 [ 155.670369][ T5364] ? release_firmware_map_entry+0x190/0x190 [ 155.676299][ T5364] __flush_work+0x116/0x210 [ 155.680837][ T5364] ? __flush_work+0xfa/0x210 [ 155.685463][ T5364] ? flush_work+0x20/0x20 [ 155.689829][ T5364] ? lock_chain_count+0x20/0x20 [ 155.694724][ T5364] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 155.700655][ T5364] ? lockdep_hardirqs_on+0x94/0x140 [ 155.705981][ T5364] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 155.711785][ T5364] ? __cancel_work_timer+0x3d8/0x560 [ 155.717112][ T5364] __cancel_work_timer+0x3f4/0x560 [ 155.722262][ T5364] ? cancel_work_sync+0x20/0x20 [ 155.727144][ T5364] ? __cancel_work+0x1f9/0x2e0 [ 155.731943][ T5364] ? lockdep_hardirqs_on+0x94/0x140 [ 155.734246][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.737172][ T5364] ? __cancel_work+0x27b/0x2e0 [ 155.744353][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.748975][ T5364] ? cancel_work+0x20/0x20 [ 155.760601][ T5364] hci_request_cancel_all+0xcc/0x300 [ 155.765926][ T5364] hci_dev_do_close+0x4e/0x1020 [ 155.770912][ T5364] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.776964][ T5364] ? _raw_spin_unlock+0x40/0x40 [ 155.781851][ T5364] hci_rfkill_set_block+0x101/0x180 [ 155.787090][ T5364] ? rcu_lock_release+0x20/0x20 [ 155.791976][ T5364] rfkill_set_block+0x1c1/0x3c0 [ 155.796864][ T5364] rfkill_fop_write+0x453/0x560 [ 155.801854][ T5364] ? rfkill_fop_read+0x560/0x560 [ 155.806831][ T5364] ? common_file_perm+0xf0/0x1c0 [ 155.811809][ T5364] ? fsnotify_perm+0x5d/0x560 [ 155.816515][ T5364] ? security_file_permission+0x75/0xa0 [ 155.822184][ T5364] ? rfkill_fop_read+0x560/0x560 [ 155.827154][ T5364] vfs_write+0x304/0xd70 [ 155.831434][ T5364] ? file_end_write+0x250/0x250 [ 155.836311][ T5364] ? preempt_schedule_irq+0xe6/0x160 [ 155.841633][ T5364] ? __fget_files+0x402/0x470 [ 155.846347][ T5364] ? __fdget_pos+0x1e2/0x370 [ 155.850963][ T5364] ? ksys_write+0x70/0x260 [ 155.855413][ T5364] ksys_write+0x153/0x260 [ 155.859768][ T5364] ? __ia32_sys_read+0x80/0x80 [ 155.864560][ T5364] ? syscall_enter_from_user_mode+0x2a/0x70 [ 155.868440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.870482][ T5364] do_syscall_64+0x4c/0xa0 [ 155.870504][ T5364] ? clear_bhb_loop+0x30/0x80 [ 155.887498][ T5364] ? clear_bhb_loop+0x30/0x80 [ 155.892206][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.898140][ T5364] RIP: 0033:0x7ff7fc8c6e59 [ 155.902585][ T5364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.906658][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 155.922225][ T5364] RSP: 002b:00007ff7faafe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.922249][ T5364] RAX: ffffffffffffffda RBX: 00007ff7fcb4f090 RCX: 00007ff7fc8c6e59 [ 155.922265][ T5364] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 155.940501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.944641][ T5364] RBP: 00007ff7fc95ce6f R08: 0000000000000000 R09: 0000000000000000 [ 155.968529][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.976528][ T5364] R13: 00007ff7fcb4f128 R14: 00007ff7fcb4f090 R15: 00007ffc88ef5718 [ 155.984619][ T5364] [ 156.054477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.074328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.091460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.487147][ T5355] bridge0: port 3(syz_tun) entered disabled state [ 156.535623][ T5355] device syz_tun left promiscuous mode [ 156.541243][ T5355] bridge0: port 3(syz_tun) entered disabled state [ 156.617937][ T4448] device hsr_slave_0 left promiscuous mode [ 156.662672][ T4448] device hsr_slave_1 left promiscuous mode [ 156.669113][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.676965][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.689455][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.696908][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.709401][ T4448] device bridge_slave_1 left promiscuous mode [ 156.716274][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.731342][ T4448] device bridge_slave_0 left promiscuous mode [ 156.737589][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.752901][ T4448] device hsr_slave_0 left promiscuous mode [ 156.759278][ T4448] device hsr_slave_1 left promiscuous mode [ 156.769931][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.777394][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.791595][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.799049][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.807650][ T4448] device bridge_slave_1 left promiscuous mode [ 156.814149][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.823458][ T4448] device bridge_slave_0 left promiscuous mode [ 156.834945][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.849484][ T4448] device dummy0 left promiscuous mode [ 156.855095][ T4448] device veth1_macvtap left promiscuous mode [ 156.862273][ T4448] device veth0_macvtap left promiscuous mode [ 156.868365][ T4448] device veth1_vlan left promiscuous mode [ 156.874220][ T4448] device veth0_vlan left promiscuous mode [ 156.881058][ T4448] device veth1_macvtap left promiscuous mode [ 156.887109][ T4448] device veth0_macvtap left promiscuous mode [ 156.893304][ T4448] device veth1_vlan left promiscuous mode [ 156.899092][ T4448] device veth0_vlan left promiscuous mode [ 157.118451][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 157.131168][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 157.142633][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.155447][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.204020][ T4448] bond0 (unregistering): Released all slaves [ 157.305518][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 157.316623][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 157.332971][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.346458][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.393976][ T4448] bond0 (unregistering): Released all slaves [ 159.118655][ T4448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.163496][ T4448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.235150][ T4448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.293595][ T4448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.394614][ T4448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.433569][ T4448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.497129][ T4448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.575878][ T4448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.546922][ T4448] device hsr_slave_0 left promiscuous mode [ 160.554044][ T4448] device hsr_slave_1 left promiscuous mode [ 160.563014][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.571069][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.578685][ T4448] device bridge_slave_1 left promiscuous mode [ 160.585375][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.593929][ T4448] device bridge_slave_0 left promiscuous mode [ 160.600449][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.616059][ T4448] device hsr_slave_0 left promiscuous mode [ 160.622470][ T4448] device hsr_slave_1 left promiscuous mode [ 160.628739][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.636878][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.646845][ T4448] device bridge_slave_1 left promiscuous mode [ 160.653780][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.664642][ T4448] device bridge_slave_0 left promiscuous mode [ 160.671059][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.684985][ T4448] device hsr_slave_0 left promiscuous mode [ 160.691492][ T4448] device hsr_slave_1 left promiscuous mode [ 160.698324][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.706111][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.714227][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.722005][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.729986][ T4448] device bridge_slave_1 left promiscuous mode [ 160.736170][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.744714][ T4448] device bridge_slave_0 left promiscuous mode [ 160.752135][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.763635][ T4448] device hsr_slave_0 left promiscuous mode [ 160.771858][ T4448] device hsr_slave_1 left promiscuous mode [ 160.778149][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.786150][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.794027][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.802195][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.810249][ T4448] device bridge_slave_1 left promiscuous mode [ 160.816452][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.825025][ T4448] device bridge_slave_0 left promiscuous mode [ 160.831561][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.846168][ T4448] device dummy0 left promiscuous mode [ 160.852031][ T4448] device veth1_macvtap left promiscuous mode [ 160.858072][ T4448] device veth0_macvtap left promiscuous mode [ 160.865472][ T4448] device veth1_vlan left promiscuous mode [ 160.871926][ T4448] device veth0_vlan left promiscuous mode [ 160.878348][ T4448] device dummy0 left promiscuous mode [ 160.885392][ T4448] device veth1_macvtap left promiscuous mode [ 160.891788][ T4448] device veth0_macvtap left promiscuous mode [ 160.897882][ T4448] device veth1_vlan left promiscuous mode [ 160.905226][ T4448] device veth0_vlan left promiscuous mode [ 161.102007][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 161.115805][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 161.126930][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.139449][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.189540][ T4448] bond0 (unregistering): Released all slaves [ 161.269661][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 161.281719][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 161.292533][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.308446][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.354625][ T4448] bond0 (unregistering): Released all slaves [ 161.438176][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 161.452224][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 161.464927][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.478403][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.526222][ T4448] bond0 (unregistering): Released all slaves [ 161.608098][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 161.622311][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 161.633250][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.645937][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.692730][ T4448] bond0 (unregistering): Released all slaves