last executing test programs: 1m45.865785885s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r2) fdatasync(r2) 1m45.512478312s ago: executing program 3 (id=13): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='\v', 0x1}], 0x1) 1m42.661806267s ago: executing program 3 (id=22): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 1m40.656536082s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1m39.357550989s ago: executing program 32 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 20.810187642s ago: executing program 6 (id=209): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0xfffffffffffffffc}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 16.258836267s ago: executing program 2 (id=214): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 16.067620817s ago: executing program 6 (id=216): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.629764541s ago: executing program 2 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 11.129818135s ago: executing program 5 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 11.011952194s ago: executing program 0 (id=230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x80288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 10.875282511s ago: executing program 2 (id=231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 8.907071084s ago: executing program 5 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 8.779083351s ago: executing program 0 (id=233): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0x2020) 8.777711082s ago: executing program 6 (id=234): syz_read_part_table(0x632, &(0x7f0000000000)="$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") dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) unshare(0x20000400) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0x169}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) 7.853204766s ago: executing program 4 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x2f8}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.795203095s ago: executing program 5 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000100) 7.684467295s ago: executing program 0 (id=240): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/87, &(0x7f0000000080)=""/77, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='kfree\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7.415942732s ago: executing program 6 (id=241): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.415389274s ago: executing program 2 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read$msr(r3, &(0x7f0000000380)=""/200, 0xc8) 7.265811565s ago: executing program 5 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) 7.259152328s ago: executing program 4 (id=255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000100) 7.153964188s ago: executing program 0 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 7.1262586s ago: executing program 1 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000340)) 5.70259671s ago: executing program 5 (id=245): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.222849151s ago: executing program 2 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xc87b, 0x400, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.206174059s ago: executing program 6 (id=247): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) pread64(r0, &(0x7f0000000100)=""/182, 0x6c, 0x9) 4.696025011s ago: executing program 4 (id=248): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f020048017f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 4.529759151s ago: executing program 0 (id=249): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 4.510873069s ago: executing program 1 (id=250): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000002fc0)={0x2020}, 0x2020) 2.901989272s ago: executing program 1 (id=251): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x70, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x46, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2}}, 0x600, 0x8ae, {0x0, 0x6, @default_ibss_ssid}, @val, @val={0x2d, 0x1a, {0x2000, 0x3, 0x5, 0x0, {0x5, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x3, 0x9}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.651348419s ago: executing program 0 (id=252): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000742000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.650604554s ago: executing program 4 (id=254): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.180889307s ago: executing program 1 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.941956028s ago: executing program 4 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000580)={0x0, 0xc6fe, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1) 1.37428772s ago: executing program 1 (id=258): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) 548.310517ms ago: executing program 5 (id=259): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000b5c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1804a, 0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 348.147227ms ago: executing program 4 (id=260): accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 111.739834ms ago: executing program 6 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000059000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 56.268605ms ago: executing program 2 (id=262): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000002c0), 0x8) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 0s ago: executing program 1 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. [ 100.862801][ T5830] cgroup: Unknown subsys name 'net' [ 100.996581][ T5830] cgroup: Unknown subsys name 'cpuset' [ 101.007241][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.477840][ T975] cfg80211: failed to load regulatory.db [ 102.716260][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.650130][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.662170][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.670354][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.678727][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.687111][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.698501][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.706582][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.713838][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.724908][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.729772][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.732313][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.747474][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.752014][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.801463][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.809839][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.815428][ T5162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.825693][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.833772][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.842237][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.843475][ T5162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.857917][ T5162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.868204][ T5162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.877217][ T5162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.878957][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.893159][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.900984][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.909572][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.928498][ T5162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.943777][ T5162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.961511][ T5162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.615028][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 106.937237][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 106.989076][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 107.033657][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 107.064843][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.074217][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.081651][ T5854] bridge_slave_0: entered allmulticast mode [ 107.089248][ T5854] bridge_slave_0: entered promiscuous mode [ 107.175376][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.182773][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.190841][ T5854] bridge_slave_1: entered allmulticast mode [ 107.198792][ T5854] bridge_slave_1: entered promiscuous mode [ 107.299052][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 107.357872][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.376849][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.509504][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.516938][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.524559][ T5857] bridge_slave_0: entered allmulticast mode [ 107.532934][ T5857] bridge_slave_0: entered promiscuous mode [ 107.554077][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 107.570622][ T5854] team0: Port device team_slave_0 added [ 107.580058][ T5854] team0: Port device team_slave_1 added [ 107.614178][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.621559][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.628775][ T5857] bridge_slave_1: entered allmulticast mode [ 107.637526][ T5857] bridge_slave_1: entered promiscuous mode [ 107.688509][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.695730][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.703388][ T5860] bridge_slave_0: entered allmulticast mode [ 107.710845][ T5860] bridge_slave_0: entered promiscuous mode [ 107.760532][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.767941][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.775256][ T5848] bridge_slave_0: entered allmulticast mode [ 107.783636][ T5848] bridge_slave_0: entered promiscuous mode [ 107.820812][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.828332][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.836435][ T5860] bridge_slave_1: entered allmulticast mode [ 107.844157][ T5860] bridge_slave_1: entered promiscuous mode [ 107.872413][ T5162] Bluetooth: hci2: command tx timeout [ 107.878092][ T5162] Bluetooth: hci0: command tx timeout [ 107.878942][ T5850] Bluetooth: hci3: command tx timeout [ 107.898829][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.906321][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.913868][ T5848] bridge_slave_1: entered allmulticast mode [ 107.921983][ T5848] bridge_slave_1: entered promiscuous mode [ 107.929804][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.936975][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.963096][ T5850] Bluetooth: hci1: command tx timeout [ 107.964332][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.979549][ T5850] Bluetooth: hci4: command tx timeout [ 108.021006][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.031677][ T5850] Bluetooth: hci5: command tx timeout [ 108.058958][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.066103][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.093041][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.104467][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.112285][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.119475][ T5863] bridge_slave_0: entered allmulticast mode [ 108.128125][ T5863] bridge_slave_0: entered promiscuous mode [ 108.155844][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.196708][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.204662][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.212957][ T5863] bridge_slave_1: entered allmulticast mode [ 108.220634][ T5863] bridge_slave_1: entered promiscuous mode [ 108.230445][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.267112][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.281580][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.310997][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.427608][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.455821][ T5857] team0: Port device team_slave_0 added [ 108.465994][ T5857] team0: Port device team_slave_1 added [ 108.472815][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.480007][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.487665][ T5851] bridge_slave_0: entered allmulticast mode [ 108.495428][ T5851] bridge_slave_0: entered promiscuous mode [ 108.537122][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.568718][ T5860] team0: Port device team_slave_0 added [ 108.609136][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.616573][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.625076][ T5851] bridge_slave_1: entered allmulticast mode [ 108.633785][ T5851] bridge_slave_1: entered promiscuous mode [ 108.644056][ T5848] team0: Port device team_slave_0 added [ 108.683772][ T5860] team0: Port device team_slave_1 added [ 108.693344][ T5863] team0: Port device team_slave_0 added [ 108.712500][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.719471][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.746686][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.775710][ T5848] team0: Port device team_slave_1 added [ 108.804738][ T5854] hsr_slave_0: entered promiscuous mode [ 108.811428][ T5854] hsr_slave_1: entered promiscuous mode [ 108.835787][ T5863] team0: Port device team_slave_1 added [ 108.858651][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.865725][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.892252][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.944944][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.952497][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.978859][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.024407][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.032164][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.058798][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.077832][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.091890][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.119113][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.126296][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.153496][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.173413][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.180395][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.206716][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.219161][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.226574][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.252829][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.313285][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.320296][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.346388][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.390689][ T5857] hsr_slave_0: entered promiscuous mode [ 109.397372][ T5857] hsr_slave_1: entered promiscuous mode [ 109.404164][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.411996][ T5857] Cannot create hsr debugfs directory [ 109.492929][ T5851] team0: Port device team_slave_0 added [ 109.553587][ T5863] hsr_slave_0: entered promiscuous mode [ 109.560070][ T5863] hsr_slave_1: entered promiscuous mode [ 109.567385][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.575005][ T5863] Cannot create hsr debugfs directory [ 109.591643][ T5851] team0: Port device team_slave_1 added [ 109.692422][ T5848] hsr_slave_0: entered promiscuous mode [ 109.699160][ T5848] hsr_slave_1: entered promiscuous mode [ 109.705594][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.713317][ T5848] Cannot create hsr debugfs directory [ 109.779203][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.786619][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.813852][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.837822][ T5860] hsr_slave_0: entered promiscuous mode [ 109.844589][ T5860] hsr_slave_1: entered promiscuous mode [ 109.850777][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.858772][ T5860] Cannot create hsr debugfs directory [ 109.904973][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.912075][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.938855][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.957721][ T5850] Bluetooth: hci3: command tx timeout [ 109.957760][ T51] Bluetooth: hci2: command tx timeout [ 109.968693][ T5162] Bluetooth: hci0: command tx timeout [ 110.031645][ T51] Bluetooth: hci1: command tx timeout [ 110.037170][ T5162] Bluetooth: hci4: command tx timeout [ 110.111535][ T5162] Bluetooth: hci5: command tx timeout [ 110.155055][ T5851] hsr_slave_0: entered promiscuous mode [ 110.164113][ T5851] hsr_slave_1: entered promiscuous mode [ 110.170358][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.178407][ T5851] Cannot create hsr debugfs directory [ 110.570678][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.585449][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.655055][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.699336][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.789612][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.809518][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.843286][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.865817][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.924380][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.940295][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.951171][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.966204][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.104491][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.129145][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.142409][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.172929][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.347151][ T5860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.369551][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.402088][ T5860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.438923][ T5860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.450839][ T5860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.477859][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.520284][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.569001][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.583406][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.590714][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.628855][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.653864][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.661019][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.675054][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.690568][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.715353][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.736510][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.773538][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.780732][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.819134][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.826354][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.873966][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.920721][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.927956][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.012320][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.024531][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.031730][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.038668][ T5162] Bluetooth: hci3: command tx timeout [ 112.045808][ T5162] Bluetooth: hci0: command tx timeout [ 112.050078][ T51] Bluetooth: hci2: command tx timeout [ 112.111777][ T51] Bluetooth: hci4: command tx timeout [ 112.112256][ T5162] Bluetooth: hci1: command tx timeout [ 112.193340][ T5162] Bluetooth: hci5: command tx timeout [ 112.240618][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.345228][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.374587][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.381854][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.456295][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.463596][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.490668][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.605149][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.612511][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.636337][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.643752][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.707090][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.815453][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.909020][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.932655][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.023427][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.030663][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.067918][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.075165][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.185130][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.429497][ T5857] veth0_vlan: entered promiscuous mode [ 113.501011][ T5857] veth1_vlan: entered promiscuous mode [ 113.619742][ T5848] veth0_vlan: entered promiscuous mode [ 113.677100][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.706129][ T5848] veth1_vlan: entered promiscuous mode [ 113.728616][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.794414][ T5857] veth0_macvtap: entered promiscuous mode [ 113.849319][ T5848] veth0_macvtap: entered promiscuous mode [ 113.897808][ T5857] veth1_macvtap: entered promiscuous mode [ 113.983214][ T5848] veth1_macvtap: entered promiscuous mode [ 114.058583][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.119533][ T5162] Bluetooth: hci2: command tx timeout [ 114.119558][ T51] Bluetooth: hci0: command tx timeout [ 114.125099][ T5162] Bluetooth: hci3: command tx timeout [ 114.158317][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.169138][ T5854] veth0_vlan: entered promiscuous mode [ 114.192717][ T5162] Bluetooth: hci4: command tx timeout [ 114.198185][ T5162] Bluetooth: hci1: command tx timeout [ 114.203808][ T5863] veth0_vlan: entered promiscuous mode [ 114.209170][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.229412][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.238715][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.247968][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.267811][ T5854] veth1_vlan: entered promiscuous mode [ 114.271476][ T5162] Bluetooth: hci5: command tx timeout [ 114.288396][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.328788][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.340088][ T5863] veth1_vlan: entered promiscuous mode [ 114.384630][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.399842][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.410008][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.419446][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.428282][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.553163][ T5860] veth0_vlan: entered promiscuous mode [ 114.609480][ T5863] veth0_macvtap: entered promiscuous mode [ 114.638075][ T5860] veth1_vlan: entered promiscuous mode [ 114.650303][ T5854] veth0_macvtap: entered promiscuous mode [ 114.670218][ T5863] veth1_macvtap: entered promiscuous mode [ 114.712823][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.716370][ T5854] veth1_macvtap: entered promiscuous mode [ 114.720757][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.807803][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.829447][ T5851] veth0_vlan: entered promiscuous mode [ 114.851586][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.860894][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.884533][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.895983][ T5851] veth1_vlan: entered promiscuous mode [ 114.902512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.928309][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.964372][ T5860] veth0_macvtap: entered promiscuous mode [ 114.975437][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.985707][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.994734][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.003837][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.029786][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.048503][ T5860] veth1_macvtap: entered promiscuous mode [ 115.068992][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.077814][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.085666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.128038][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.190915][ T5851] veth0_macvtap: entered promiscuous mode [ 115.246461][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.268092][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.282412][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.296122][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.355229][ T5851] veth1_macvtap: entered promiscuous mode [ 115.411577][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.477842][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.507593][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.515643][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.547192][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.625931][ T5860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.650552][ T5860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.672012][ T5860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.690762][ T5860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.712379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.829265][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.860908][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.887868][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.901025][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.910176][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.965641][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.978837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.133656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.150981][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.320665][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.330572][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.405379][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.434184][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.652504][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.660387][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.704472][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.731266][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.874632][ T6008] loop3: detected capacity change from 0 to 2048 [ 116.961176][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.006286][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.016389][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.190320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.368941][ T6017] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.962686][ T6026] loop3: detected capacity change from 2048 to 64 [ 118.206846][ T6008] syz.3.13: attempt to access beyond end of device [ 118.206846][ T6008] loop3: rw=2049, sector=448, nr_sectors = 8 limit=64 [ 118.310690][ T6008] EXT4-fs warning (device loop3): ext4_end_bio:368: I/O error 10 writing to inode 15 starting block 112) [ 118.379858][ T6031] loop5: detected capacity change from 0 to 512 [ 118.390056][ T6008] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 118.462689][ T6031] EXT4-fs: Ignoring removed i_version option [ 118.478091][ T6008] Buffer I/O error on device loop3, logical block 112 [ 118.485032][ T6008] Buffer I/O error on device loop3, logical block 113 [ 118.497893][ T6031] EXT4-fs: Ignoring removed nobh option [ 118.548056][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.634780][ T6031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.467642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.519143][ T6031] EXT4-fs (loop5): 1 truncate cleaned up [ 119.566574][ T6031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.757163][ T5863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.852469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.092658][ T6011] kmmpd-loop3: attempt to access beyond end of device [ 120.092658][ T6011] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 120.262044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.272925][ T6011] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 120.502022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.510675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.520183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.528729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.537418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.989689][ T5860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.829790][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.436071][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.789602][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.140998][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.618638][ T12] bridge_slave_1: left allmulticast mode [ 124.761462][ T12] bridge_slave_1: left promiscuous mode [ 124.770381][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.030874][ T12] bridge_slave_0: left allmulticast mode [ 125.071556][ T12] bridge_slave_0: left promiscuous mode [ 125.495630][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.074663][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.084044][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.091840][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.101056][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.109180][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.191720][ T5162] Bluetooth: hci5: command tx timeout [ 129.161680][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.433990][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.471310][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.484498][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.551262][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.681302][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.731010][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.763904][ T10] usb 1-1: config 0 descriptor?? [ 129.816266][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.889682][ T975] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 129.943010][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.003759][ T975] usb 2-1: config 0 descriptor?? [ 130.276219][ T5162] Bluetooth: hci5: command tx timeout [ 130.371495][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.386749][ T6130] loop4: detected capacity change from 0 to 2048 [ 130.569873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.587789][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.687100][ T975] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 130.687690][ T12] bond0 (unregistering): Released all slaves [ 130.870208][ T975] usb 2-1: USB disconnect, device number 2 [ 130.950595][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 130.980616][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.012907][ T6130] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.060541][ T10] usb 1-1: USB disconnect, device number 2 [ 131.191656][ T6130] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 138 with error 28 [ 131.231902][ T6130] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.231902][ T6130] [ 131.275181][ T6130] EXT4-fs (loop4): Total free blocks count 0 [ 131.318365][ T6130] EXT4-fs (loop4): Free/Dirty block details [ 131.329367][ T6135] fido_id[6135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.366960][ T6130] EXT4-fs (loop4): free_blocks=2415919104 [ 131.425226][ T6130] EXT4-fs (loop4): dirty_blocks=144 [ 131.486521][ T6130] EXT4-fs (loop4): Block reservation details [ 131.543332][ T6130] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 132.398144][ T5162] Bluetooth: hci5: command tx timeout [ 133.637677][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 8 with error 28 [ 134.101690][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.441284][ T5162] Bluetooth: hci5: command tx timeout [ 134.804860][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.944418][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.944536][ T9] usb 6-1: Product: syz [ 134.944581][ T9] usb 6-1: Manufacturer: syz [ 134.944627][ T9] usb 6-1: SerialNumber: syz [ 135.192563][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.333033][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 135.353366][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 135.466243][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.481737][ T12] hsr_slave_0: left promiscuous mode [ 135.678982][ T6190] loop4: detected capacity change from 0 to 32768 [ 135.686732][ T6190] XFS: ikeep mount option is deprecated. [ 135.762616][ T6190] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.775143][ T12] hsr_slave_1: left promiscuous mode [ 135.798225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.812052][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.895043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.967015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.975201][ T6190] XFS (loop4): Ending clean mount [ 136.013760][ T6190] XFS (loop4): Quotacheck needed: Please wait. [ 136.088948][ T6190] XFS (loop4): Quotacheck: Done. [ 136.180874][ T12] veth1_macvtap: left promiscuous mode [ 136.218499][ T12] veth0_macvtap: left promiscuous mode [ 136.250817][ T12] veth1_vlan: left promiscuous mode [ 136.756942][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.982377][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.992370][ T12] veth0_vlan: left promiscuous mode [ 137.131243][ T30] audit: type=1800 audit(1752509494.434:2): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.56" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 137.242931][ T10] usb 6-1: Service connection timeout for: 257 [ 137.281727][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 137.420416][ T10] ath9k_htc: Failed to initialize the device [ 137.446695][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 137.490682][ T5854] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.416758][ T6224] loop4: detected capacity change from 0 to 16 [ 138.518378][ T6224] erofs (device loop4): mounted with root inode @ nid 36. [ 138.619532][ T24] usb 6-1: USB disconnect, device number 2 [ 138.866791][ T6226] process 'syz.5.62' launched './file0' with NULL argv: empty string added [ 139.042759][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 139.111884][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.241754][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.295814][ T6235] syz.5.65 uses obsolete (PF_INET,SOCK_PACKET) [ 139.314429][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.416174][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.445072][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.478245][ T24] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.497749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.509506][ T24] usb 3-1: Product: syz [ 139.516845][ T24] usb 3-1: Manufacturer: syz [ 139.530059][ T24] usb 3-1: SerialNumber: syz [ 139.549062][ T24] usb 3-1: config 0 descriptor?? [ 139.567615][ T6231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.579849][ T6231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.817925][ T6231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.834886][ T6231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.939033][ T6208] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.974743][ T6228] bridge0: entered allmulticast mode [ 140.002853][ T6232] bridge_slave_1: left allmulticast mode [ 140.008567][ T6232] bridge_slave_1: left promiscuous mode [ 140.043570][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.200374][ T6232] bridge_slave_0: left allmulticast mode [ 140.226257][ T6232] bridge_slave_0: left promiscuous mode [ 140.240391][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.268094][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 140.887322][ T6232] bridge0 (unregistering): left allmulticast mode [ 141.237665][ T24] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 141.546755][ T24] usb 3-1: USB disconnect, device number 2 [ 142.438907][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.452014][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.633779][ T24] libceph: connect (1)[c::]:6789 error -101 [ 142.661902][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 142.777487][ T6261] ceph: No mds server is up or the cluster is laggy [ 143.158126][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 144.268450][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.526894][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.567563][ T6091] bridge_slave_0: entered allmulticast mode [ 144.758962][ T6091] bridge_slave_0: entered promiscuous mode [ 144.834165][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.896813][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.971486][ T6091] bridge_slave_1: entered allmulticast mode [ 144.979651][ T6091] bridge_slave_1: entered promiscuous mode [ 145.403602][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.497314][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.812556][ T6091] team0: Port device team_slave_0 added [ 145.878199][ T6091] team0: Port device team_slave_1 added [ 147.235879][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.266650][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.409597][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.509807][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.563729][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.597358][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.971047][ T6091] hsr_slave_0: entered promiscuous mode [ 149.166930][ T6091] hsr_slave_1: entered promiscuous mode [ 149.297899][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.317105][ T6091] Cannot create hsr debugfs directory [ 149.572219][ T6353] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.938855][ T6353] wireguard0: entered promiscuous mode [ 149.978437][ T6353] wireguard0: entered allmulticast mode [ 151.325628][ T6091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.485246][ T6091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.595005][ T6091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.696272][ T6091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.878190][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.967391][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.996942][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.004225][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.710842][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.718066][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.994406][ T6403] loop2: detected capacity change from 0 to 256 [ 155.022735][ T6403] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.081351][ T5946] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.082199][ T6403] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 155.419793][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 155.421131][ T6403] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.437745][ T5946] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.466659][ T5946] usb 2-1: config 0 has no interface number 0 [ 155.502457][ T5946] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.514709][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.562804][ T5946] usb 2-1: Product: syz [ 155.954185][ T5946] usb 2-1: Manufacturer: syz [ 156.182145][ T5946] usb 2-1: SerialNumber: syz [ 156.229730][ T5946] usb 2-1: config 0 descriptor?? [ 156.293475][ T5946] smsc95xx v2.0.0 [ 156.868509][ T5946] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 156.940647][ T5946] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 157.553219][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.620718][ T5946] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 158.672950][ T5946] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 158.762809][ T5946] usb 2-1: USB disconnect, device number 3 [ 159.696782][ T6435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 159.758306][ T6435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 159.831477][ T6435] Zero length message leads to an empty skb [ 160.266988][ T6091] veth0_vlan: entered promiscuous mode [ 160.650407][ T6091] veth1_vlan: entered promiscuous mode [ 161.130751][ T6449] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 161.167020][ T6091] veth0_macvtap: entered promiscuous mode [ 161.293724][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 161.365406][ T6452] loop5: detected capacity change from 0 to 64 [ 161.379483][ T6091] veth1_macvtap: entered promiscuous mode [ 161.401853][ T30] audit: type=1800 audit(1752509518.704:3): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.109" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 161.487378][ T6454] syz.5.109: attempt to access beyond end of device [ 161.487378][ T6454] loop5: rw=34817, sector=18, nr_sectors = 400 limit=64 [ 161.501493][ T6454] syz.5.109: attempt to access beyond end of device [ 161.501493][ T6454] loop5: rw=34817, sector=420, nr_sectors = 20 limit=64 [ 161.537361][ T6454] syz.5.109: attempt to access beyond end of device [ 161.537361][ T6454] loop5: rw=34817, sector=441, nr_sectors = 64 limit=64 [ 162.088818][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.167172][ T6456] loop0: detected capacity change from 0 to 16 [ 162.180429][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.317190][ T6091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.395677][ T6091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.451031][ T6091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.456272][ T6456] erofs (device loop0): mounted with root inode @ nid 36. [ 162.520751][ T6091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.113304][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.151150][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.972822][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.365626][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.700259][ T6481] binder: BINDER_SET_CONTEXT_MGR already set [ 165.709292][ T6481] binder: 6480:6481 ioctl 4018620d 200000000040 returned -16 [ 167.119610][ T6499] loop1: detected capacity change from 0 to 32768 [ 167.126980][ T6499] XFS: ikeep mount option is deprecated. [ 167.347936][ T6499] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.962653][ T6499] XFS (loop1): Ending clean mount [ 167.993243][ T6499] XFS (loop1): Quotacheck needed: Please wait. [ 168.117199][ T6499] XFS (loop1): Quotacheck: Done. [ 169.178007][ T6513] loop6: detected capacity change from 0 to 4096 [ 169.191352][ T30] audit: type=1800 audit(1752509526.434:4): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 169.324152][ T6513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.368547][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.343547][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.359477][ T6527] loop0: detected capacity change from 0 to 512 [ 170.576133][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.692696][ T6527] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.923013][ T6526] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.127: corrupted inode contents [ 172.289364][ T6526] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.127: mark_inode_dirty error [ 172.386041][ T6526] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.127: corrupted inode contents [ 172.550780][ T6526] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.127: mark_inode_dirty error [ 172.603898][ T6540] xt_CT: No such helper "syz1" [ 173.336908][ T6548] fuse: Bad value for 'fd' [ 173.493637][ T6550] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 173.525567][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.773768][ T6550] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.159199][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 174.194100][ T6549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.451775][ T44] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 177.026764][ T5997] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.407812][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.421761][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.430791][ T44] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 177.440049][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.475159][ T44] usb 2-1: config 0 descriptor?? [ 177.499005][ T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 177.506739][ T5997] usb 6-1: Using ep0 maxpacket: 16 [ 177.515601][ T5997] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 177.524492][ T5997] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.547407][ T5997] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.556422][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 177.562750][ T5997] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.609189][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 177.633966][ T5997] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.662770][ T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 177.697957][ T5997] usb 6-1: config 0 has no interface number 0 [ 177.744922][ T44] usb 2-1: media controller created [ 177.841962][ T5997] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 178.009624][ T9] delete_channel: no stack [ 178.095059][ T6596] loop4: detected capacity change from 0 to 32768 [ 178.119467][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.131569][ T5997] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 178.156118][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 178.160951][ T6598] binder: BINDER_SET_CONTEXT_MGR already set [ 178.162128][ T5997] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.188225][ T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 178.196425][ T5997] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.243742][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 178.299700][ T6598] binder: 6597:6598 ioctl 4018620d 200000000040 returned -16 [ 178.411323][ T5997] usb 6-1: config 0 interface 125 has no altsetting 0 [ 178.436069][ T5997] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 178.451582][ T44] dvb-usb: schedule remote query interval to 150 msecs. [ 178.481319][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.489553][ T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 178.501462][ T5997] usb 6-1: Product: syz [ 178.505773][ T5997] usb 6-1: Manufacturer: syz [ 178.516002][ T5997] usb 6-1: SerialNumber: syz [ 178.627180][ T6596] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 178.627229][ T6596] allowing incompatible features above 0.0: (unknown version) [ 178.627250][ T6596] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 178.674506][ T6596] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 178.683955][ T6596] bcachefs (loop4): initializing new filesystem [ 178.699725][ T6596] bcachefs (loop4): going read-write [ 178.708145][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 178.714265][ T44] dvb-usb: error while querying for an remote control event. [ 178.727737][ T5997] usb 6-1: config 0 descriptor?? [ 178.845596][ T6596] bcachefs (loop4): marking superblocks [ 178.865155][ T6596] bcachefs (loop4): initializing freespace [ 178.875043][ T6596] bcachefs (loop4): done initializing freespace [ 178.884060][ T6596] bcachefs (loop4): reading snapshots table [ 178.890003][ T6596] bcachefs (loop4): reading snapshots done [ 178.915765][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 178.941379][ T44] dvb-usb: error while querying for an remote control event. [ 179.029528][ T6596] bcachefs (loop4): done starting filesystem [ 179.101693][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 179.139112][ T44] dvb-usb: error while querying for an remote control event. [ 179.332374][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 179.385303][ T44] dvb-usb: error while querying for an remote control event. [ 179.632316][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 179.789968][ T44] dvb-usb: error while querying for an remote control event. [ 179.817242][ T6596] syz.4.149 (6596) used greatest stack depth: 18520 bytes left [ 180.011479][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 180.017280][ T44] dvb-usb: error while querying for an remote control event. [ 180.065025][ T5854] bcachefs (loop4): shutting down [ 180.069084][ T44] usb 6-1: USB disconnect, device number 3 [ 180.070296][ T5854] bcachefs (loop4): going read-only [ 180.133013][ T5854] bcachefs (loop4): finished waiting for writes to stop [ 180.201513][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 180.253776][ T6020] dvb-usb: error while querying for an remote control event. [ 180.263826][ T5854] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 180.304492][ T30] audit: type=1804 audit(1752509537.614:5): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.155" name="/newroot/7/file0" dev="tmpfs" ino=56 res=1 errno=0 [ 180.305128][ T6619] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 180.359550][ T6619] ref_ctr increment failed for inode: 0x38 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807ddd8000 [ 180.392953][ T9] usb 2-1: USB disconnect, device number 4 [ 180.413811][ T5854] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 180.465340][ T6608] bch-reclaim/loo (6608) used greatest stack depth: 18432 bytes left [ 180.504955][ T5854] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 180.541868][ T5854] bcachefs (loop4): marking filesystem clean [ 180.683725][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 180.972209][ T5854] bcachefs (loop4): shutdown complete [ 182.916858][ T6648] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 186.924729][ T6666] loop2: detected capacity change from 0 to 1024 [ 187.058090][ T6668] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.174'. [ 187.135086][ T6668] netlink: zone id is out of range [ 187.140244][ T6668] netlink: zone id is out of range [ 187.194528][ T6668] netlink: zone id is out of range [ 188.683709][ T2982] hfsplus: b-tree write err: -5, ino 4 [ 190.321414][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.792551][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 190.872993][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.910529][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 190.931570][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.491399][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.500536][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.095932][ T9] usb 3-1: config 0 descriptor?? [ 192.101830][ T6691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.120156][ T9] hub 3-1:0.0: USB hub found [ 192.332727][ T9] hub 3-1:0.0: 2 ports detected [ 194.508228][ T6729] binder: 6728:6729 ioctl c0306201 200000000680 returned -14 [ 195.433066][ T5997] usb 3-1: USB disconnect, device number 3 [ 195.435522][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 195.513792][ T9] usb 3-1-port2: attempt power cycle [ 197.428782][ T6756] loop5: detected capacity change from 0 to 256 [ 197.444142][ T6756] exfat: Deprecated parameter 'utf8' [ 197.449676][ T6756] exfat: Deprecated parameter 'namecase' [ 197.455932][ T6756] exfat: Deprecated parameter 'namecase' [ 197.857775][ T6756] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 200.801077][ T6773] loop0: detected capacity change from 0 to 128 [ 201.214757][ T6773] EXT4-fs: Ignoring removed nobh option [ 201.476265][ T6773] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.892223][ T6773] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.142485][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.209'. [ 204.531723][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.539158][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.311971][ T6806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 206.564638][ T5848] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.575949][ T30] audit: type=1326 audit(1752509563.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 206.666908][ T6814] loop5: detected capacity change from 0 to 16 [ 206.783966][ T6814] erofs (device loop5): algorithm 1 isn't enabled on this kernel [ 206.881494][ T6020] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 207.374459][ T30] audit: type=1326 audit(1752509564.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 207.423983][ T30] audit: type=1326 audit(1752509564.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 207.519905][ T30] audit: type=1326 audit(1752509564.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 207.612379][ T6020] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.654385][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.672771][ T30] audit: type=1326 audit(1752509564.764:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 207.687949][ T6020] usb 7-1: Product: syz [ 207.812562][ T6020] usb 7-1: Manufacturer: syz [ 207.822309][ T6020] usb 7-1: SerialNumber: syz [ 208.202100][ T6020] usb 7-1: config 0 descriptor?? [ 208.237642][ T30] audit: type=1326 audit(1752509564.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 208.319755][ T30] audit: type=1326 audit(1752509564.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 208.461468][ T30] audit: type=1326 audit(1752509564.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 208.552439][ T6020] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.594956][ T30] audit: type=1326 audit(1752509564.764:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 209.207308][ T30] audit: type=1326 audit(1752509564.764:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8740d8e929 code=0x7ffc0000 [ 210.790090][ T6847] input: syz1 as /devices/virtual/input/input6 [ 210.865778][ T6020] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 210.933358][ T6020] usb 7-1: USB disconnect, device number 2 [ 211.104997][ T6851] loop1: detected capacity change from 0 to 8 [ 211.134725][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 211.142765][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 211.149471][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 211.157433][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.136690][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.144865][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.151996][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.160019][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.166331][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.174191][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.181159][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.189031][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.257785][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.265726][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.272076][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.279897][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.286227][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.294108][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.300374][ T6851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.308355][ T6851] SQUASHFS error: Failed to read block 0x0: -5 [ 212.315650][ T6858] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.325476][ T6858] SQUASHFS error: Failed to read block 0x0: -5 [ 212.332218][ T6858] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.340470][ T6858] SQUASHFS error: Failed to read block 0x0: -5 [ 214.128825][ T6872] loop6: detected capacity change from 0 to 2048 [ 214.307944][ T5866] loop6: p1 < > p3 [ 214.322125][ T5866] loop6: p3 size 134217728 extends beyond EOD, truncated [ 214.365518][ T6872] loop6: p1 < > p3 [ 214.429165][ T6872] loop6: p3 size 134217728 extends beyond EOD, truncated [ 217.154547][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 217.417465][ T5866] udevd[5866]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 217.675941][ T5866] udevd[5866]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 221.860998][ T6956] loop5: detected capacity change from 0 to 64 [ 221.904984][ T6956] ======================================================= [ 221.904984][ T6956] WARNING: The mand mount option has been deprecated and [ 221.904984][ T6956] and is ignored by this kernel. Remove the mand [ 221.904984][ T6956] option from the mount to silence this warning. [ 221.904984][ T6956] ======================================================= [ 222.970328][ T6967] netlink: 'syz.1.263': attribute type 27 has an invalid length. [ 223.188479][ T6971] loop2: detected capacity change from 0 to 8 [ 223.639782][ T6956] [ 223.642172][ T6956] ====================================================== [ 223.649203][ T6956] WARNING: possible circular locking dependency detected [ 223.656265][ T6956] 6.16.0-rc6-syzkaller #0 Not tainted [ 223.661652][ T6956] ------------------------------------------------------ [ 223.668689][ T6956] syz.5.259/6956 is trying to acquire lock: [ 223.674598][ T6956] ffff8880222ec0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 223.684036][ T6956] [ 223.684036][ T6956] but task is already holding lock: [ 223.691420][ T6956] ffff8880795800f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 223.702208][ T6956] [ 223.702208][ T6956] which lock already depends on the new lock. [ 223.702208][ T6956] [ 223.712627][ T6956] [ 223.712627][ T6956] the existing dependency chain (in reverse order) is: [ 223.721653][ T6956] [ 223.721653][ T6956] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 223.730917][ T6956] __mutex_lock+0x199/0xb90 [ 223.735999][ T6956] hfs_extend_file+0xa1/0xb10 [ 223.741231][ T6956] hfs_bmap_reserve+0x2a2/0x390 [ 223.746654][ T6956] __hfs_ext_write_extent+0x3cf/0x520 [ 223.752583][ T6956] hfs_ext_read_extent+0x807/0x9e0 [ 223.758245][ T6956] hfs_extend_file+0x4e2/0xb10 [ 223.763569][ T6956] hfs_get_block+0x17f/0x830 [ 223.768719][ T6956] __blockdev_direct_IO+0x26b8/0x4180 [ 223.774647][ T6956] hfs_direct_IO+0x106/0x2c0 [ 223.779789][ T6956] generic_file_direct_write+0x19a/0x410 [ 223.785987][ T6956] __generic_file_write_iter+0x11b/0x240 [ 223.792188][ T6956] generic_file_write_iter+0xe1/0x3c0 [ 223.798123][ T6956] do_iter_readv_writev+0x657/0x950 [ 223.803872][ T6956] vfs_writev+0x35f/0xde0 [ 223.808750][ T6956] do_writev+0x132/0x340 [ 223.813563][ T6956] do_syscall_64+0xcd/0x4c0 [ 223.818644][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.825089][ T6956] [ 223.825089][ T6956] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 223.833066][ T6956] __lock_acquire+0x126f/0x1c90 [ 223.838497][ T6956] lock_acquire+0x179/0x350 [ 223.843564][ T6956] __mutex_lock+0x199/0xb90 [ 223.848647][ T6956] hfs_find_init+0x183/0x220 [ 223.853804][ T6956] hfs_ext_read_extent+0x19b/0x9e0 [ 223.859468][ T6956] hfs_extend_file+0x4e2/0xb10 [ 223.864782][ T6956] hfs_bmap_reserve+0x2a2/0x390 [ 223.870206][ T6956] hfs_cat_create+0x229/0x820 [ 223.875454][ T6956] hfs_create+0x6b/0xf0 [ 223.880154][ T6956] lookup_open.isra.0+0x11d3/0x1580 [ 223.885904][ T6956] path_openat+0x893/0x2cb0 [ 223.890965][ T6956] do_filp_open+0x20b/0x470 [ 223.896027][ T6956] do_sys_openat2+0x11b/0x1d0 [ 223.901272][ T6956] __x64_sys_openat+0x174/0x210 [ 223.906693][ T6956] do_syscall_64+0xcd/0x4c0 [ 223.911768][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.918211][ T6956] [ 223.918211][ T6956] other info that might help us debug this: [ 223.918211][ T6956] [ 223.928451][ T6956] Possible unsafe locking scenario: [ 223.928451][ T6956] [ 223.935912][ T6956] CPU0 CPU1 [ 223.941289][ T6956] ---- ---- [ 223.946668][ T6956] lock(&HFS_I(tree->inode)->extents_lock); [ 223.952688][ T6956] lock(&tree->tree_lock/1); [ 223.959934][ T6956] lock(&HFS_I(tree->inode)->extents_lock); [ 223.968470][ T6956] lock(&tree->tree_lock/1); [ 223.973197][ T6956] [ 223.973197][ T6956] *** DEADLOCK *** [ 223.973197][ T6956] [ 223.981350][ T6956] 4 locks held by syz.5.259/6956: [ 223.986420][ T6956] #0: ffff8880222e0428 (sb_writers#20){.+.+}-{0:0}, at: path_openat+0x1f0f/0x2cb0 [ 223.995892][ T6956] #1: ffff888079581620 (&type->i_mutex_dir_key#10){+.+.}-{4:4}, at: path_openat+0x1534/0x2cb0 [ 224.006358][ T6956] #2: ffff888021ece0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x1be/0x220 [ 224.016047][ T6956] #3: ffff8880795800f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 224.027283][ T6956] [ 224.027283][ T6956] stack backtrace: [ 224.033193][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.5.259 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 224.033238][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.033260][ T6956] Call Trace: [ 224.033274][ T6956] [ 224.033288][ T6956] dump_stack_lvl+0x116/0x1f0 [ 224.033348][ T6956] print_circular_bug+0x275/0x350 [ 224.033410][ T6956] check_noncircular+0x14c/0x170 [ 224.033475][ T6956] __lock_acquire+0x126f/0x1c90 [ 224.033539][ T6956] ? do_syscall_64+0xcd/0x4c0 [ 224.033607][ T6956] lock_acquire+0x179/0x350 [ 224.033639][ T6956] ? hfs_find_init+0x183/0x220 [ 224.033691][ T6956] ? __pfx___might_resched+0x10/0x10 [ 224.033746][ T6956] __mutex_lock+0x199/0xb90 [ 224.033802][ T6956] ? hfs_find_init+0x183/0x220 [ 224.033854][ T6956] ? hfs_find_init+0x183/0x220 [ 224.033905][ T6956] ? __pfx___mutex_lock+0x10/0x10 [ 224.033968][ T6956] ? rcu_is_watching+0x12/0xc0 [ 224.034015][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034060][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034104][ T6956] ? __kmalloc_noprof+0x242/0x510 [ 224.034150][ T6956] ? hfs_find_init+0x183/0x220 [ 224.034198][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034242][ T6956] hfs_find_init+0x183/0x220 [ 224.034293][ T6956] hfs_ext_read_extent+0x19b/0x9e0 [ 224.034332][ T6956] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 224.034374][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034417][ T6956] ? __mutex_lock+0x1ca/0xb90 [ 224.034480][ T6956] hfs_extend_file+0x4e2/0xb10 [ 224.034518][ T6956] ? __pfx_hfs_extend_file+0x10/0x10 [ 224.034563][ T6956] ? rcu_is_watching+0x12/0xc0 [ 224.034609][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034657][ T6956] hfs_bmap_reserve+0x2a2/0x390 [ 224.034718][ T6956] ? hfs_find_init+0x1be/0x220 [ 224.034769][ T6956] hfs_cat_create+0x229/0x820 [ 224.034831][ T6956] ? __pfx_hfs_cat_create+0x10/0x10 [ 224.034898][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034952][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.034996][ T6956] ? hfs_new_inode+0x4af/0xce0 [ 224.035038][ T6956] hfs_create+0x6b/0xf0 [ 224.035069][ T6956] ? __pfx_hfs_create+0x10/0x10 [ 224.035102][ T6956] lookup_open.isra.0+0x11d3/0x1580 [ 224.035145][ T6956] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 224.035195][ T6956] ? __pfx_down_write+0x10/0x10 [ 224.035229][ T6956] ? mnt_get_write_access+0x20c/0x300 [ 224.035291][ T6956] path_openat+0x893/0x2cb0 [ 224.035342][ T6956] ? __pfx_path_openat+0x10/0x10 [ 224.035387][ T6956] ? __lock_acquire+0xb8a/0x1c90 [ 224.035449][ T6956] do_filp_open+0x20b/0x470 [ 224.035493][ T6956] ? __pfx_do_filp_open+0x10/0x10 [ 224.035560][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.035604][ T6956] ? alloc_fd+0x471/0x7d0 [ 224.035652][ T6956] do_sys_openat2+0x11b/0x1d0 [ 224.035706][ T6956] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.035774][ T6956] __x64_sys_openat+0x174/0x210 [ 224.035829][ T6956] ? __pfx___x64_sys_openat+0x10/0x10 [ 224.035889][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.035939][ T6956] do_syscall_64+0xcd/0x4c0 [ 224.035998][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.036035][ T6956] RIP: 0033:0x7f4a80f8e929 [ 224.036063][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.036098][ T6956] RSP: 002b:00007f4a81d19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.036132][ T6956] RAX: ffffffffffffffda RBX: 00007f4a811b5fa0 RCX: 00007f4a80f8e929 [ 224.036156][ T6956] RDX: 00000000001a10c1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 224.036180][ T6956] RBP: 00007f4a81010b39 R08: 0000000000000000 R09: 0000000000000000 [ 224.036203][ T6956] R10: 9c37611dc13d0d83 R11: 0000000000000246 R12: 0000000000000000 [ 224.036226][ T6956] R13: 0000000000000000 R14: 00007f4a811b5fa0 R15: 00007ffe7ebbb3a8 [ 224.036262][ T6956] [ 225.221426][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 225.221453][ T30] audit: type=1800 audit(1752509582.154:27): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.262" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 225.480637][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.488036][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.736532][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.815006][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.981305][ T6967] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.990268][ T6967] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.028082][ T6967] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.037487][ T6967] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.107499][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.117486][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.131574][ T6969] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 226.140453][ T6969] caif:caif_disconnect_client(): nothing to disconnect [ 226.152142][ T6969] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 226.160830][ T6969] chnl_net:chnl_net_open(): state disconnected [ 226.169084][ T6969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.554561][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 231.554790][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 231.562706][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 231.566710][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 231.572988][ T5855] Bluetooth: hci2: command 0x0406 tx timeout