last executing test programs: 12.25557901s ago: executing program 3 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 10.96912186s ago: executing program 3 (id=203): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000001180)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@commit={'commit', 0x3d, 0x9}}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 8.634175868s ago: executing program 4 (id=208): socket(0x22, 0x2, 0x4) r0 = syz_mount_image$minix(&(0x7f0000000300), &(0x7f00000002c0)='./file2\x00', 0x804040, &(0x7f0000000340)=ANY=[], 0xff, 0x20b, &(0x7f0000000080)="$eJzs3E1PE0Ecx/HfdluoaMSH+BBPJibGi1SBhPSkvADfgIkHgoU0FjXiBWKivAnvXj35Ekz0ffgG4ODNE2Nmd5p224XODm1X6feT0P2znd/sbGGGbhsqADPraXIbKVI9qYwxH+9Kev5MUrXkwQGYKOO2xwbA7ImDp/6L7hoC4L90tB5Lqut7JP36/WHz0H3VPZ8/HK1X0iKSDvvyF3zzB1GyvVPN5hckXRxqPXxBYr6k+fvK5i8VPP7CQF5XfPPp+T+4p5r68pclLUpJN1clXZN0XZq3bW9IqmSOP+e+6+VvpzsOPE8DAAAAAIBT2avPpbPmR3YQS3qUe4+9Dt5qd1r5945Wc/nHgfk5l18+Y36lf2flpNZRr6ylm3mXX9p803kZOAYgVKXY/B96WdBn/p84HdzKkJ3/Nf/RuFcEt9qfC2UApHb39l9tdDqtd+MsnpzWRiraoV0RxjzC/OKrLfQnfWdkwscKKexiGxrvviETEO/+ruS2+aTR/RiPNuepqI58nOP8BzO/+KFocJ5WM5Pom/sB2T1jmykDC0U8vTUJwHQ03u+8bezu7T9s72xst7Zbr1fXms211ZXlZiN5Wm5vzWLZowQwCb0/+mWPBAAAAAAAAAAAAAAAhLop6VZS/TwuEPP9eA8AAAAA/5Bp/FNU2ecIAAAAAAAAAAAAAMB59zcAAP//fi0zsQ==") r1 = socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xffffff07, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000540)=ANY=[@ANYBLOB="009f65000000ceb9634fb287c9", @ANYBLOB="48a8bf83a6d2787172006896845dab9a122db845963267565820edf5f5809fd7da74677b60912a6c022442346d3447a56981e982cc1437570146ceb750a8da022e150d14e8c4bc83fd3f6c731aee95310596e1e54342d145f20f3878a41219ccbe8f5e80c84d70b303c7fa0c9db7019cbc9380a709009931f438b366cdf701303b27237eba0b3a80cde1a1b8e6db18d95465ffa51338c56faa69bf2be30dd81b01a09a536ee901fddca750e1436d4229b92e51d34109a1df2b601a457f827f25e6c6dd1bdeba9e97685c5bf62b1c", @ANYBLOB="ffffffff00"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="020020000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000123f00000000009500000000000000933fac0d3b8068fc1889e0b61ea16f5f59a5796b83ae56b7580e4dc9396bb18259b2ab1ad3b42a6d8e2c64d417ca7782926b45508c370c8db0fc8ac38d3c4e8a254b9bdde539184c9238fe71c6cc6aa5b93df55a50716510f3dc2fda0b8123a001d01ff96d4afc90647365892d2f6acce0d706621036b4b68e6bfff0e2be4f0049a0346da060abdf878015a27ade3a02f80f892bfb68fa5eb0ada9247bcd33cce24f96abe27952492f90d7979e670d50c2852b19dfd9ab82f1845aed25e022ff"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c0100001900010000000000fbdbdf251d0109004d001280fad241ac16163e3c374707fd17b5771cb771dc540494d85aac894ae2059958b8d4274e60a71d1cbda77de681f15b98daedf8c8b5eaa33f1da7ae305c4536fc16f348ea54334ab9b6af000000280106802401ce8020013e800c01a0800801618004019d80fd00638008006000", @ANYRES32=0x0, @ANYBLOB="0400a50061009080210044800800b00047504c000400a50004003a000400c5802777ace821d9d793c3000000f0d1352a224aadf38cc0be9a1bfc6ea31cfe9abdfc6e08360d8cf57b7256e18c92263487faf40caf4b040e15ceaf45c9fef3a61ad0e2cba61a000000040070800c", @ANYRES32=0x0, @ANYBLOB="3c00de8014004a00fe8000000000000000000000000000bb2400328008000800f7ffffff0c000400090000000000000008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0ac0c00b88008008900", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x5}, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200e3325400"/30, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) close(r4) r6 = open(0x0, 0x64942, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000440)={{0x2, 0x4e25, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x6e, {0x2, 0x4e22, @private=0xa010102}, 'ip_vti0\x00'}) 8.201041015s ago: executing program 4 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xfffd}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) 6.506030683s ago: executing program 1 (id=211): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40c880, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0xe8, 0x4c, 0x1a, 0x0, 0x75, 0x1d8, 0x258, 0x258, 0x1d8, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd8, 0x0, "7c5b1119deee0a316bfe8aa2e6bb553025ffd5185958a95ad49386c11b32"}}}, {{@ipv6={@mcast2, @local, [], [], 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'wlan1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r6, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 6.194376378s ago: executing program 4 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe, r5}, 0x10) 6.123744319s ago: executing program 0 (id=214): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 5.301859583s ago: executing program 1 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a0104000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 4.331260889s ago: executing program 4 (id=216): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1ff, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x45, 0x7fff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x106, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 4.23335429s ago: executing program 3 (id=217): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) keyctl$invalidate(0x15, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rename(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00') socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00', 0xf4240) r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80500) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) removexattr(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)=@random={'system.', '@\\:\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, r6, &(0x7f0000000200)='./file0/../file0/file0/file0\x00') 4.121685742s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x9}}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setresuid(0x0, 0xee01, 0xee00) 4.083790652s ago: executing program 1 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 4.081974662s ago: executing program 2 (id=220): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 3.517550881s ago: executing program 2 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = semget$private(0x0, 0x1, 0x10) semtimedop(r4, 0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) 3.413864323s ago: executing program 4 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x10c}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) 3.039117919s ago: executing program 0 (id=223): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.182952793s ago: executing program 2 (id=224): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000001c0)) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 1.829360309s ago: executing program 3 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ed5e663d526471f13c2337606f728101e2ff2c08a1e094f09e53dcd97f6df60bd0a65f64da599b9bf5a5a9a0"]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.828816479s ago: executing program 4 (id=226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.78656978s ago: executing program 0 (id=227): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x10, 0xfffffffe, 0x2c, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x10, 0x7800, 0x8, 0xfffffffd}}) 765.066336ms ago: executing program 2 (id=228): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x3, 0x4) 526.71662ms ago: executing program 3 (id=229): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) fcntl$setstatus(r0, 0x4, 0x2000) write$6lowpan_enable(r0, &(0x7f0000000280)='1', 0x1) 525.534701ms ago: executing program 1 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 442.387092ms ago: executing program 0 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a0104000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 441.477962ms ago: executing program 1 (id=232): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 357.326733ms ago: executing program 2 (id=233): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1ff, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x45, 0x7fff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x106, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 138.276687ms ago: executing program 3 (id=234): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x3}}, {}, {@part={'part', 0x3d, 0x7}}, {@barrier}, {@nobarrier}, {@uid={'uid', 0x3d, 0xee00}}, {@type={'type', 0x3d, "91260fae"}}]}, 0x3, 0x637, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) creat(&(0x7f0000000100)='./file2\x00', 0x48) 105.523948ms ago: executing program 0 (id=235): r0 = creat(0x0, 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8482, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.362389ms ago: executing program 1 (id=236): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3f9, 0x20000000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=237): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. syzkaller login: [ 65.991337][ T4237] cgroup: Unknown subsys name 'net' [ 66.130307][ T4237] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.637932][ T4237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.767730][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.767855][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.783835][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.784061][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.792488][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.799442][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.806695][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.814179][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.820123][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.826325][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.835725][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.841468][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.847657][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.855652][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.863033][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.868687][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.876070][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.883937][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.891346][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.896855][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.904154][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.910284][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.917191][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.931242][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.931518][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.939032][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.954237][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.961602][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.988704][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.001464][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.347202][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.460765][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 70.621144][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 70.647162][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.654440][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.662839][ T4251] device bridge_slave_0 entered promiscuous mode [ 70.676483][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.683763][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.691824][ T4251] device bridge_slave_1 entered promiscuous mode [ 70.728364][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.735653][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.744090][ T4252] device bridge_slave_0 entered promiscuous mode [ 70.759620][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 70.771183][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.780682][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 70.801961][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.809249][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.817437][ T4252] device bridge_slave_1 entered promiscuous mode [ 70.839324][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.906294][ T4251] team0: Port device team_slave_0 added [ 70.929280][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.944426][ T4251] team0: Port device team_slave_1 added [ 70.966850][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.991494][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.999052][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.007387][ T4249] device bridge_slave_0 entered promiscuous mode [ 71.050116][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.057466][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.065578][ T4249] device bridge_slave_1 entered promiscuous mode [ 71.082352][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.089415][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.115501][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.155643][ T4252] team0: Port device team_slave_0 added [ 71.162386][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.169569][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.195802][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.207230][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.214639][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.222731][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.230512][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.237782][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.246105][ T4256] device bridge_slave_0 entered promiscuous mode [ 71.263363][ T4252] team0: Port device team_slave_1 added [ 71.275393][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.282506][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.291182][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.307431][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.314632][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.322500][ T4256] device bridge_slave_1 entered promiscuous mode [ 71.331473][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.346227][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.352704][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.397658][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.417285][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.429329][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.455704][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.468984][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.502660][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.509875][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.536199][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.549830][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.560871][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.582386][ T4251] device hsr_slave_0 entered promiscuous mode [ 71.589663][ T4251] device hsr_slave_1 entered promiscuous mode [ 71.610942][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.622488][ T4249] team0: Port device team_slave_0 added [ 71.650101][ T4250] team0: Port device team_slave_0 added [ 71.673841][ T4249] team0: Port device team_slave_1 added [ 71.690237][ T4250] team0: Port device team_slave_1 added [ 71.709189][ T4256] team0: Port device team_slave_0 added [ 71.727198][ T4252] device hsr_slave_0 entered promiscuous mode [ 71.734425][ T4252] device hsr_slave_1 entered promiscuous mode [ 71.741101][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.749451][ T4252] Cannot create hsr debugfs directory [ 71.783387][ T4256] team0: Port device team_slave_1 added [ 71.808154][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.815279][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.841925][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.889820][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.896982][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.923909][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.936590][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.943610][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.969583][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.981465][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.988920][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.015015][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.031706][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.038762][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.065314][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.065402][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 72.082451][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 72.082470][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 72.082677][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 72.095227][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.101560][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 72.108317][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.140058][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.213056][ T4249] device hsr_slave_0 entered promiscuous mode [ 72.219981][ T4249] device hsr_slave_1 entered promiscuous mode [ 72.226945][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.235382][ T4249] Cannot create hsr debugfs directory [ 72.267951][ T4256] device hsr_slave_0 entered promiscuous mode [ 72.275140][ T4256] device hsr_slave_1 entered promiscuous mode [ 72.281857][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.289498][ T4256] Cannot create hsr debugfs directory [ 72.362195][ T4250] device hsr_slave_0 entered promiscuous mode [ 72.369587][ T4250] device hsr_slave_1 entered promiscuous mode [ 72.376700][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.384477][ T4250] Cannot create hsr debugfs directory [ 72.635112][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.646961][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.656632][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.668780][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.740486][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.750063][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.763984][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.789123][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.837067][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.850259][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.862694][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.889952][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.914855][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.957341][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.970162][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.982005][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.991481][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.059779][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.069276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.086974][ T4250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.098945][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.122091][ T4250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.140877][ T4250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.151123][ T4250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.164570][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.173671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.182724][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.190062][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.200583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.246523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.259324][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.268315][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.275611][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.284769][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.295668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.337505][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.347581][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.359322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.382642][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.399098][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.409711][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.419361][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.428568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.446019][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.476480][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.484671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.493045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.502334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.520409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.543111][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.558268][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.569472][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.584613][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.593164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.638091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.651451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.661605][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.668793][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.678436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.689196][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.697920][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.705096][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.713509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.722574][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.732722][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739893][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.748455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.757072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.765580][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.774541][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.782676][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.800472][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.808682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.818570][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.832399][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.839623][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.877755][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.892988][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.903982][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.912684][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.919882][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.934247][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.943111][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.952128][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.959252][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.969237][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.979159][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.992418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.001959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.014699][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.031374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.039504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.053128][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.080886][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.090200][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.099124][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.109005][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.119710][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.129891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.140112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.148795][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 74.148851][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 74.154488][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 74.156692][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 74.160904][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 74.189874][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.211690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.220259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.230407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.239627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.248861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.258450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.267281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.276232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.285406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.294376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.303219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.312548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.325206][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.337156][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.355379][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.375465][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.396217][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.415046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.431530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.440706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.450011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.458679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.467380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.476018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.485064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.495046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.502240][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.511199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.557920][ T4251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.584351][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.616937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.639485][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.654551][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.661695][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.694034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.704045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.713092][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.722660][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.732213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.742414][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.757688][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.783044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.815481][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.854576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.882418][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.926017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.942554][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.975258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.004206][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.032576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.048547][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.087747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.104784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.149543][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.169185][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.205243][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.282827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.310135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.374367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.390998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.401785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.418610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.437990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.447820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.456838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.465245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.472779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.481104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.490276][ T4252] device veth0_vlan entered promiscuous mode [ 75.501933][ T4249] device veth0_vlan entered promiscuous mode [ 75.512109][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.532103][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.546097][ T4252] device veth1_vlan entered promiscuous mode [ 75.561644][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.570812][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.580223][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.589024][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.607562][ T4249] device veth1_vlan entered promiscuous mode [ 75.624850][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.632403][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.665810][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.676375][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.685951][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.700080][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.709546][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.728329][ T4252] device veth0_macvtap entered promiscuous mode [ 75.739236][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.748377][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.758712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.790313][ T4252] device veth1_macvtap entered promiscuous mode [ 75.802220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.811953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.820879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.831913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.840739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.849396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.858403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.870764][ T4249] device veth0_macvtap entered promiscuous mode [ 75.892464][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.914521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.922796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.932008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.941193][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.950967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.962498][ T4249] device veth1_macvtap entered promiscuous mode [ 75.970601][ T4256] device veth0_vlan entered promiscuous mode [ 75.980793][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.010911][ T4256] device veth1_vlan entered promiscuous mode [ 76.019754][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.028761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.037180][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.046739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.056634][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.065434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.074672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.083020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.096357][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.111779][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121352][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.132157][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.149484][ T4251] device veth0_vlan entered promiscuous mode [ 76.162198][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.174754][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.186547][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.198247][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.207892][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.216027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.223740][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 76.224619][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 76.230345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.235930][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 76.235968][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 76.235999][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 76.262588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.271693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.282489][ T4250] device veth0_vlan entered promiscuous mode [ 76.305575][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.320456][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.332089][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.353323][ T4250] device veth1_vlan entered promiscuous mode [ 76.360566][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.369608][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.378985][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.389074][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.415448][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.425621][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.437119][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.446406][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.459068][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.469060][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.480255][ T4256] device veth0_macvtap entered promiscuous mode [ 76.492874][ T4251] device veth1_vlan entered promiscuous mode [ 76.522561][ T4256] device veth1_macvtap entered promiscuous mode [ 76.576616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.585484][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.594077][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.602225][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.611013][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.651624][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.669966][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.680699][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.690425][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.699606][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.717542][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.726887][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.741314][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.755363][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.765493][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.776001][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.787735][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.799249][ T4251] device veth0_macvtap entered promiscuous mode [ 76.816097][ T4250] device veth0_macvtap entered promiscuous mode [ 76.835113][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.845909][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.854861][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.864964][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.877566][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.888311][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.898596][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.909345][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.921874][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.935810][ T4250] device veth1_macvtap entered promiscuous mode [ 76.968385][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.977506][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.987009][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.998171][ T4251] device veth1_macvtap entered promiscuous mode [ 77.023171][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.034333][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.043078][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.051932][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.066856][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.072469][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.086230][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.095108][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.107860][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.119651][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.129606][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.144384][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.156063][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.171449][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.182771][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.193052][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.207308][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.217208][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.227879][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.239792][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.254772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.262950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.273080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.285617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.294810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.304193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.326834][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.339527][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.350959][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.361963][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.372173][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.382745][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.392690][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.403207][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.413087][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.424419][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.436273][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.448331][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457556][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466457][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475269][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.499102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.515202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.529807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.549670][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.564913][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.576073][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.587513][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.597614][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.608891][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.619001][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.629676][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.641208][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.668772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.673957][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.687958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.699073][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.721540][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745914][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.759599][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.770105][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.943227][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.953346][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.991810][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.017346][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.046520][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.071023][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.088817][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.097571][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.121928][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.132224][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.213259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.241925][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.279456][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.285578][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.302860][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.308774][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 78.323879][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 78.330130][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 78.330162][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 78.336351][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 78.348951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.357277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 78.365630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.373944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.382223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.390611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.398965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.407303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.415622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.423933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 78.793642][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.013551][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.068243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.977684][ T4345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.840347][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.201008][ T4375] loop4: detected capacity change from 0 to 8 [ 83.265181][ T27] audit: type=1800 audit(1743988104.872:2): pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 83.303490][ T4375] SQUASHFS error: Failed to read block 0x2fc: -5 [ 83.310599][ T4375] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 83.317997][ T4375] SQUASHFS error: read_indexes: reading block [2fa:0] [ 83.325537][ T4375] SQUASHFS error: Failed to read block 0xfc: -5 [ 83.332204][ T4375] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 83.339582][ T4375] SQUASHFS error: read_indexes: reading block [2fa:0] [ 83.346886][ T4375] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 83.354439][ T4375] SQUASHFS error: read_indexes: reading block [2fa:0] [ 83.366794][ T4375] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 83.374194][ T4375] SQUASHFS error: read_indexes: reading block [2fa:0] [ 83.381316][ T4375] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 83.388684][ T4375] SQUASHFS error: read_indexes: reading block [2fa:0] [ 84.713572][ T3640] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.933849][ T3640] usb 5-1: Using ep0 maxpacket: 16 [ 85.707978][ T3640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.770221][ T3640] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 85.807102][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 85.823924][ T3640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.875629][ T3640] usb 5-1: config 0 descriptor?? [ 85.892210][ T4400] loop0: detected capacity change from 0 to 64 [ 85.910576][ T4400] ======================================================= [ 85.910576][ T4400] WARNING: The mand mount option has been deprecated and [ 85.910576][ T4400] and is ignored by this kernel. Remove the mand [ 85.910576][ T4400] option from the mount to silence this warning. [ 85.910576][ T4400] ======================================================= [ 85.945511][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.955575][ T4399] loop1: detected capacity change from 0 to 1024 [ 85.985905][ T4399] hfsplus: unable to parse mount options [ 86.169816][ T4399] loop1: detected capacity change from 0 to 128 [ 86.271264][ T4403] Trying to free block not in datazone [ 86.283023][ T4403] Trying to free block not in datazone [ 86.288681][ T4403] Trying to free block not in datazone [ 86.336004][ T4403] Trying to free block not in datazone [ 86.444816][ T3640] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x0 [ 86.453753][ T3640] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x0 [ 86.461423][ T3640] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x0 [ 86.469168][ T3640] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x0 [ 86.476767][ T3640] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x0 [ 86.548550][ T3640] corsair-psu 0003:1B1C:1C07.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.4-1/input0 [ 86.633869][ T3640] corsair-psu 0003:1B1C:1C07.0001: unable to initialize device (-38) [ 86.716337][ T951] cfg80211: failed to load regulatory.db [ 86.836410][ T3640] corsair-psu: probe of 0003:1B1C:1C07.0001 failed with error -38 [ 86.851688][ T3640] usb 5-1: USB disconnect, device number 2 [ 87.523227][ T4399] EXT4-fs (loop1): Test dummy encryption mode enabled [ 87.618184][ T4399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.687526][ T4424] loop4: detected capacity change from 0 to 8 [ 87.757627][ T27] audit: type=1800 audit(1743988109.372:3): pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 87.782352][ T4424] SQUASHFS error: Failed to read block 0x2fc: -5 [ 87.790187][ T4424] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 87.797746][ T4424] SQUASHFS error: read_indexes: reading block [2fa:0] [ 87.804831][ T4424] SQUASHFS error: Failed to read block 0xfc: -5 [ 87.811647][ T4424] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 87.819281][ T4424] SQUASHFS error: read_indexes: reading block [2fa:0] [ 87.829302][ T4424] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 87.836773][ T4424] SQUASHFS error: read_indexes: reading block [2fa:0] [ 87.848033][ T4424] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 87.855424][ T4424] SQUASHFS error: read_indexes: reading block [2fa:0] [ 87.862279][ T4424] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 87.869646][ T4424] SQUASHFS error: read_indexes: reading block [2fa:0] [ 88.603823][ T4399] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.210052][ T4431] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 91.046336][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 91.209760][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 91.795346][ T4460] loop4: detected capacity change from 0 to 64 [ 92.081014][ T4462] Trying to free block not in datazone [ 92.089344][ T4462] Trying to free block not in datazone [ 92.094956][ T4462] Trying to free block not in datazone [ 92.128946][ T4462] Trying to free block not in datazone [ 92.622736][ T4454] input: syz0 as /devices/virtual/input/input5 [ 93.217344][ T4452] loop0: detected capacity change from 0 to 32768 [ 93.314222][ T4452] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.417750][ T4477] loop3: detected capacity change from 0 to 8 [ 94.396238][ T27] audit: type=1800 audit(1743988115.772:4): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 94.456264][ T4452] (syz.0.33,4452,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 94.568455][ T4452] (syz.0.33,4452,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 94.582443][ T4452] (syz.0.33,4452,1):ocfs2_mknod:298 ERROR: status = -2 [ 94.590120][ T4452] (syz.0.33,4452,1):ocfs2_mknod:502 ERROR: status = -2 [ 94.623533][ T4452] (syz.0.33,4452,1):ocfs2_create:676 ERROR: status = -2 [ 94.932798][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 95.706202][ T4488] loop4: detected capacity change from 0 to 1024 [ 95.713289][ T4488] hfsplus: unable to parse mount options [ 95.927491][ T4488] loop4: detected capacity change from 0 to 128 [ 95.940586][ T4488] EXT4-fs (loop4): Test dummy encryption mode enabled [ 96.053616][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.082933][ T4488] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.197333][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 96.239023][ T4500] loop2: detected capacity change from 0 to 64 [ 97.909343][ T4507] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 98.016895][ T4506] Trying to free block not in datazone [ 98.025629][ T4506] Trying to free block not in datazone [ 98.031229][ T4506] Trying to free block not in datazone [ 98.042715][ T4506] Trying to free block not in datazone [ 98.146857][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 98.265973][ T4518] loop2: detected capacity change from 0 to 128 [ 98.894819][ T4530] overlayfs: filesystem on './file1' not supported [ 99.648249][ T4535] loop0: detected capacity change from 0 to 8 [ 100.401728][ T4535] SQUASHFS error: Failed to read block 0x2fc: -5 [ 100.408547][ T4535] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 100.415975][ T4535] SQUASHFS error: read_indexes: reading block [2fa:0] [ 100.422981][ T4535] SQUASHFS error: Failed to read block 0xfc: -5 [ 100.430024][ T4535] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 100.437421][ T4535] SQUASHFS error: read_indexes: reading block [2fa:0] [ 100.445291][ T4535] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 100.452676][ T4535] SQUASHFS error: read_indexes: reading block [2fa:0] [ 100.533692][ T27] audit: type=1800 audit(1743988121.982:5): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.53" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 102.271413][ T4541] ceph: No mds server is up or the cluster is laggy [ 102.282863][ T4536] libceph: connect (1)[c::]:6789 error -101 [ 102.360702][ T4536] libceph: mon0 (1)[c::]:6789 connect error [ 102.710538][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 102.899609][ T4536] libceph: connect (1)[c::]:6789 error -101 [ 102.907688][ T4536] libceph: mon0 (1)[c::]:6789 connect error [ 102.918629][ T4565] netlink: 84 bytes leftover after parsing attributes in process `syz.2.59'. [ 103.022505][ T4566] loop3: detected capacity change from 0 to 64 [ 103.407056][ T4568] Trying to free block not in datazone [ 103.419431][ T4568] Trying to free block not in datazone [ 103.426237][ T4568] Trying to free block not in datazone [ 103.439262][ T4536] libceph: connect (1)[c::]:6789 error -101 [ 103.442762][ T4568] Trying to free block not in datazone [ 103.449900][ T4536] libceph: mon0 (1)[c::]:6789 connect error [ 106.072835][ T4581] sched: RT throttling activated [ 107.235814][ T4609] ptrace attach of "./syz-executor exec"[4251] was attempted by "./syz-executor exec"[4609] [ 107.338308][ T4609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 109.087454][ T4596] loop1: detected capacity change from 0 to 32768 [ 109.100201][ T4615] loop3: detected capacity change from 0 to 164 [ 109.793853][ T4413] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.155181][ T4622] Unsupported NM flag settings (8) [ 111.084935][ T4635] loop2: detected capacity change from 0 to 8 [ 112.066711][ T4638] tty tty2: ldisc open failed (-12), clearing slot 1 [ 112.428899][ T27] audit: type=1800 audit(1743988134.042:6): pid=4635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 112.772913][ T4645] loop1: detected capacity change from 0 to 1024 [ 112.811494][ T4645] hfsplus: unable to parse mount options [ 112.905010][ T4645] loop1: detected capacity change from 0 to 128 [ 112.944701][ T4645] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.988895][ T4645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.041114][ T4645] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.224378][ T4655] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.409795][ T4665] loop0: detected capacity change from 0 to 40427 [ 115.422246][ T4665] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.430358][ T4665] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.495416][ T4665] F2FS-fs (loop0): invalid crc value [ 115.513551][ T125] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 115.546610][ T4665] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.605164][ T4665] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.612439][ T4665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.610112][ T125] usb 2-1: device descriptor read/64, error -71 [ 116.708289][ T4679] mmap: syz.4.86 (4679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.497902][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 118.577478][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 118.627132][ T4685] 8021q: VLANs not supported on lo [ 118.963549][ T4696] loop2: detected capacity change from 0 to 8 [ 119.203680][ T27] audit: type=1800 audit(1743988140.802:7): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 119.832447][ T4700] loop1: detected capacity change from 0 to 1024 [ 121.360847][ T4718] loop1: detected capacity change from 0 to 1024 [ 121.412647][ T4718] hfsplus: unable to parse mount options [ 121.598528][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.654074][ T4718] loop1: detected capacity change from 0 to 128 [ 121.762115][ T4718] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.854603][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.898420][ T4718] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.099733][ T4265] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 123.109756][ T4265] CPU: 0 PID: 4265 Comm: kworker/u5:4 Not tainted 6.1.132-syzkaller #0 [ 123.118051][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.128161][ T4265] Workqueue: hci4 hci_rx_work [ 123.132934][ T4265] Call Trace: [ 123.136241][ T4265] [ 123.139197][ T4265] dump_stack_lvl+0x1e3/0x2cb [ 123.143955][ T4265] ? nf_tcp_handle_invalid+0x647/0x647 [ 123.149459][ T4265] ? panic+0x764/0x764 [ 123.153580][ T4265] sysfs_create_dir_ns+0x2c6/0x390 [ 123.158730][ T4265] ? sysfs_warn_dup+0xa0/0xa0 [ 123.163448][ T4265] kobject_add_internal+0x6df/0xd10 [ 123.168705][ T4265] kobject_add+0x14e/0x210 [ 123.173144][ T4265] ? device_add+0x3c2/0xfd0 [ 123.177680][ T4265] ? kobject_init+0x1d0/0x1d0 [ 123.182371][ T4265] ? __raw_spin_lock_init+0x41/0x100 [ 123.187665][ T4265] ? get_device_parent+0x128/0x400 [ 123.192791][ T4265] device_add+0x476/0xfd0 [ 123.197154][ T4265] hci_conn_add_sysfs+0xe4/0x1f0 [ 123.202105][ T4265] le_conn_complete_evt+0xcfe/0x1350 [ 123.207412][ T4265] ? trace_contention_end+0x61/0x170 [ 123.212713][ T4265] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 123.218975][ T4265] ? __mutex_unlock_slowpath+0x218/0x750 [ 123.224640][ T4265] ? mutex_unlock+0x10/0x10 [ 123.229156][ T4265] ? skb_pull_data+0x10e/0x220 [ 123.233937][ T4265] hci_le_conn_complete_evt+0x188/0x410 [ 123.239509][ T4265] hci_event_packet+0xa40/0x1510 [ 123.244466][ T4265] ? hci_remote_host_features_evt+0x270/0x270 [ 123.250638][ T4265] ? bis_list+0x290/0x290 [ 123.254975][ T4265] ? do_raw_spin_unlock+0x137/0x8a0 [ 123.260190][ T4265] ? kcov_remote_start+0x4ae/0x7c0 [ 123.265312][ T4265] ? lockdep_hardirqs_on+0x80/0x130 [ 123.270525][ T4265] ? hci_send_to_monitor+0x99/0x4d0 [ 123.275740][ T4265] hci_rx_work+0x3a6/0xd10 [ 123.280213][ T4265] ? process_one_work+0x806/0x1260 [ 123.285336][ T4265] process_one_work+0x917/0x1260 [ 123.290319][ T4265] ? worker_detach_from_pool+0x260/0x260 [ 123.295970][ T4265] ? _raw_spin_lock_irqsave+0x120/0x120 [ 123.301527][ T4265] ? kthread_data+0x4e/0xc0 [ 123.306055][ T4265] ? wq_worker_running+0x97/0x190 [ 123.311102][ T4265] worker_thread+0xa47/0x1200 [ 123.315793][ T4265] ? release_firmware_map_entry+0x18b/0x18b [ 123.321715][ T4265] kthread+0x28d/0x320 [ 123.325798][ T4265] ? worker_clr_flags+0x190/0x190 [ 123.330834][ T4265] ? kthread_blkcg+0xd0/0xd0 [ 123.335432][ T4265] ret_from_fork+0x1f/0x30 [ 123.339875][ T4265] [ 123.344139][ T125] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 123.363965][ T4265] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 123.377654][ T4265] Bluetooth: hci4: failed to register connection device [ 123.563681][ T125] usb 2-1: device descriptor read/64, error -71 [ 123.668970][ T4721] loop0: detected capacity change from 0 to 32768 [ 123.696676][ T4745] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 123.843576][ T125] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 124.812024][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 126.340462][ T4771] loop0: detected capacity change from 0 to 32768 [ 126.956918][ T4776] loop2: detected capacity change from 0 to 64 [ 127.654902][ T4779] Trying to free block not in datazone [ 127.664668][ T4779] Trying to free block not in datazone [ 127.670240][ T4779] Trying to free block not in datazone [ 127.680414][ T4779] Trying to free block not in datazone [ 127.745158][ T4771] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 127.822653][ T4771] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.891671][ T4771] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 127.911351][ T4771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 127.921261][ T4771] OCFS2: File system is now read-only. [ 127.927565][ T4771] (syz.0.113,4771,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 127.935417][ T4771] (syz.0.113,4771,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 127.943170][ T4771] (syz.0.113,4771,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 127.951624][ T4771] (syz.0.113,4771,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 127.960046][ T4771] (syz.0.113,4771,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 127.968223][ T4771] (syz.0.113,4771,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 127.976413][ T4771] (syz.0.113,4771,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 127.985264][ T4771] (syz.0.113,4771,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 127.993956][ T4771] (syz.0.113,4771,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 128.003010][ T4771] (syz.0.113,4771,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 128.012906][ T4771] (syz.0.113,4771,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 128.021706][ T4771] (syz.0.113,4771,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 128.031354][ T4771] (syz.0.113,4771,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 128.040585][ T4771] (syz.0.113,4771,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 128.049735][ T4771] (syz.0.113,4771,0):ocfs2_convert_inline_data_to_extents:7073 ERROR: status = -30 [ 128.059136][ T4771] (syz.0.113,4771,0):ocfs2_try_to_write_inline_data:1565 ERROR: status = -30 [ 128.068134][ T4771] (syz.0.113,4771,0):ocfs2_write_begin_nolock:1677 ERROR: status = -30 [ 128.076492][ T4771] (syz.0.113,4771,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 128.164213][ T4771] syz.0.113 (4771) used greatest stack depth: 18016 bytes left [ 128.300058][ T4790] Bluetooth: MGMT ver 1.22 [ 128.430263][ T4788] loop1: detected capacity change from 0 to 1024 [ 128.708535][ T4788] hfsplus: unable to parse mount options [ 129.104870][ T4788] loop1: detected capacity change from 0 to 128 [ 129.193194][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 129.271212][ T4788] EXT4-fs (loop1): Test dummy encryption mode enabled [ 129.370442][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.379893][ T4788] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.602940][ T4799] loop4: detected capacity change from 0 to 8 [ 131.025445][ T27] audit: type=1800 audit(1743988152.652:8): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.119" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 131.046634][ T4797] loop3: detected capacity change from 0 to 1764 [ 131.281651][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 132.005305][ T4818] loop0: detected capacity change from 0 to 64 [ 132.026327][ T4817] loop1: detected capacity change from 0 to 4096 [ 132.154182][ T4823] Trying to free block not in datazone [ 132.210269][ T4823] Trying to free block not in datazone [ 132.216089][ T4823] Trying to free block not in datazone [ 132.246457][ T4823] Trying to free block not in datazone [ 132.787816][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.891700][ T4836] loop4: detected capacity change from 0 to 1024 [ 133.923333][ T4836] hfsplus: unable to parse mount options [ 134.322238][ T4843] loop1: detected capacity change from 0 to 8 [ 136.505301][ T4299] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 136.569494][ T27] audit: type=1800 audit(1743988158.172:9): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.134" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 136.773696][ T4299] usb 5-1: device descriptor read/64, error -71 [ 136.934569][ T4854] sp0: Synchronizing with TNC [ 136.960942][ T4854] [U] è [ 137.053509][ T4299] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 138.371265][ T4865] loop1: detected capacity change from 0 to 64 [ 139.343463][ T4872] Trying to free block not in datazone [ 139.486927][ T4872] Trying to free block not in datazone [ 139.492479][ T4872] Trying to free block not in datazone [ 139.503706][ T4872] Trying to free block not in datazone [ 140.641391][ T4883] overlayfs: missing 'lowerdir' [ 140.735435][ T4888] loop0: detected capacity change from 0 to 8 [ 141.794596][ T27] audit: type=1800 audit(1743988163.402:10): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.146" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 142.121582][ T4888] SQUASHFS error: Failed to read block 0x2fc: -5 [ 142.128263][ T4888] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 142.135724][ T4888] SQUASHFS error: read_indexes: reading block [2fa:0] [ 142.142675][ T4888] SQUASHFS error: Failed to read block 0xfc: -5 [ 142.149567][ T4888] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 142.156987][ T4888] SQUASHFS error: read_indexes: reading block [2fa:0] [ 142.164601][ T4888] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 142.172174][ T4888] SQUASHFS error: read_indexes: reading block [2fa:0] [ 142.438430][ T4892] loop4: detected capacity change from 0 to 64 [ 142.689297][ T4901] loop1: detected capacity change from 0 to 64 [ 142.831113][ T4904] Trying to free block not in datazone [ 142.837598][ T4904] Trying to free block not in datazone [ 142.843171][ T4904] Trying to free block not in datazone [ 142.861092][ T4904] Trying to free block not in datazone [ 145.088510][ T4926] loop3: detected capacity change from 0 to 8 [ 145.288792][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 146.063171][ T4265] Bluetooth: hci4: command 0x0405 tx timeout [ 146.111519][ T27] audit: type=1800 audit(1743988167.732:11): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 146.420353][ T4929] loop2: detected capacity change from 0 to 512 [ 146.504291][ T4929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.730401][ T4929] EXT4-fs (loop2): 1 orphan inode deleted [ 146.764935][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.770215][ T4339] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 146.840150][ T4941] loop3: detected capacity change from 0 to 16 [ 146.843751][ T4339] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:9: Failed to release dquot type 1 [ 146.861727][ T4929] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.947048][ T4941] erofs: (device loop3): mounted with root inode @ nid 36. [ 146.952096][ T4944] loop1: detected capacity change from 0 to 64 [ 147.038463][ T4944] Trying to free block not in datazone [ 147.044358][ T4944] Trying to free block not in datazone [ 147.049925][ T4944] Trying to free block not in datazone [ 147.060101][ T4944] Trying to free block not in datazone [ 147.409924][ T4950] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.531027][ T4950] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 147.542655][ T4950] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 147.816361][ T4949] EXT4-fs (loop2): shut down requested (2) [ 147.833563][ T27] audit: type=1800 audit(1743988169.442:12): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 148.161225][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 148.238459][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 148.250594][ T4641] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 148.783107][ T4967] loop2: detected capacity change from 0 to 1024 [ 148.809873][ T4967] hfsplus: unable to parse mount options [ 149.594670][ T4413] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.601767][ T4967] loop2: detected capacity change from 0 to 128 [ 149.646139][ T4967] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.667229][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.677791][ T4978] loop0: detected capacity change from 0 to 8 [ 149.709812][ T27] audit: type=1800 audit(1743988171.332:13): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.177" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 149.760794][ T4967] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.816271][ T951] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 150.832874][ T4987] loop4: detected capacity change from 0 to 64 [ 151.033862][ T951] usb 3-1: device descriptor read/64, error -71 [ 151.085040][ T4991] loop1: detected capacity change from 0 to 64 [ 151.108500][ T4991] Trying to free block not in datazone [ 151.118999][ T4991] Trying to free block not in datazone [ 151.124661][ T4991] Trying to free block not in datazone [ 151.135888][ T4991] Trying to free block not in datazone [ 151.313566][ T951] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 151.483633][ T951] usb 3-1: device descriptor read/64, error -71 [ 151.604795][ T951] usb usb3-port1: attempt power cycle [ 151.644636][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 151.741032][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 151.937308][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 153.497318][ T4993] loop3: detected capacity change from 0 to 40427 [ 153.535964][ T4993] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 153.553503][ T4993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.804634][ T4334] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.873009][ T4993] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.993592][ T4334] usb 3-1: Using ep0 maxpacket: 8 [ 154.007881][ T4334] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 154.032657][ T5031] loop1: detected capacity change from 0 to 64 [ 154.050015][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.227659][ T5031] Trying to free block not in datazone [ 154.235473][ T5031] Trying to free block not in datazone [ 154.241833][ T5031] Trying to free block not in datazone [ 154.251453][ T4334] usb 3-1: Product: syz [ 154.254635][ T5031] Trying to free block not in datazone [ 154.261080][ T4334] usb 3-1: Manufacturer: syz [ 154.283047][ T4334] usb 3-1: SerialNumber: syz [ 154.319126][ T4334] usb 3-1: config 0 descriptor?? [ 154.364324][ T4334] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 154.423566][ T4334] usb 3-1: setting power ON [ 154.451705][ T4334] dvb-usb: bulk message failed: -22 (2/0) [ 154.499208][ T4334] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.532822][ T4334] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 154.542077][ T5037] loop1: detected capacity change from 0 to 1024 [ 154.543038][ T5037] hfsplus: unable to parse mount options [ 154.611502][ T4334] usb 3-1: media controller created [ 154.727448][ T5017] dvb-usb: bulk message failed: -22 (3/0) [ 154.781179][ T5017] usb 3-1: gpio_write failed. [ 154.810127][ T5037] loop1: detected capacity change from 0 to 128 [ 154.824828][ T5017] dvb-usb: bulk message failed: -22 (3/0) [ 155.380352][ T5037] EXT4-fs (loop1): Test dummy encryption mode enabled [ 155.458960][ T4334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.480323][ T4334] usb 3-1: selecting invalid altsetting 6 [ 155.487436][ T4334] usb 3-1: digital interface selection failed (-22) [ 155.488541][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.494682][ T4334] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 155.524823][ T4334] usb 3-1: setting power OFF [ 155.530030][ T4334] dvb-usb: bulk message failed: -22 (2/0) [ 155.544567][ T5037] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.573137][ T4334] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 155.585048][ T5045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.198'. [ 155.602100][ T4334] (NULL device *): no alternate interface [ 155.844749][ T4334] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 155.909258][ T4334] usb 3-1: USB disconnect, device number 5 [ 156.303675][ T2165] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 156.473769][ T2165] usb 2-1: device descriptor read/64, error -71 [ 156.686127][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'. [ 156.769361][ T2165] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 156.943478][ T2165] usb 2-1: device descriptor read/64, error -71 [ 157.016113][ T5063] loop2: detected capacity change from 0 to 8 [ 157.197278][ T27] audit: type=1800 audit(1743988178.782:14): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.205" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 157.285674][ T2165] usb usb2-port1: attempt power cycle [ 157.606185][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 158.445835][ T5071] loop4: detected capacity change from 0 to 64 [ 158.542610][ T5071] Trying to free block not in datazone [ 158.548912][ T5071] Trying to free block not in datazone [ 158.554484][ T5071] Trying to free block not in datazone [ 158.564639][ T5071] Trying to free block not in datazone [ 158.734876][ T5056] loop3: detected capacity change from 0 to 32768 [ 158.851916][ T5056] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.203 (5056) [ 158.883140][ T5058] loop0: detected capacity change from 0 to 32768 [ 159.023784][ T5058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.204 (5058) [ 159.217941][ T5056] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.243694][ T5056] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.252436][ T5056] BTRFS info (device loop3): enabling auto defrag [ 159.278417][ T5056] BTRFS info (device loop3): doing ref verification [ 160.285502][ T5056] BTRFS info (device loop3): max_inline at 0 [ 160.308972][ T5058] BTRFS error (device loop0): open_ctree failed: -4 [ 160.318474][ T5056] BTRFS info (device loop3): force clearing of disk cache [ 160.341052][ T5056] BTRFS info (device loop3): disabling free space tree [ 161.158221][ T5056] BTRFS error (device loop3): open_ctree failed: -12 [ 161.402833][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 162.414574][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 162.483560][ T5108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'. [ 165.791782][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.189345][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 166.198848][ T26] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.248998][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.319229][ T5161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.230'. [ 166.344168][ T26] usb 5-1: Product: syz [ 166.348405][ T26] usb 5-1: Manufacturer: syz [ 166.353037][ T26] usb 5-1: SerialNumber: syz [ 166.398168][ T26] usb 5-1: config 0 descriptor?? [ 166.469249][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 166.633822][ T26] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.920029][ T5173] loop3: detected capacity change from 0 to 1024 [ 166.960738][ T5175] [ 166.963137][ T5175] ====================================================== [ 166.970186][ T5175] WARNING: possible circular locking dependency detected [ 166.977381][ T5175] 6.1.132-syzkaller #0 Not tainted [ 166.982521][ T5175] ------------------------------------------------------ [ 166.989559][ T5175] syz.2.237/5175 is trying to acquire lock: [ 166.990006][ T5173] syz.3.234: attempt to access beyond end of device [ 166.990006][ T5173] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 166.995462][ T5175] ffff8880759597d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 166.995530][ T5175] [ 166.995530][ T5175] but task is already holding lock: [ 166.995537][ T5175] ffff88801effbb60 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 166.995603][ T5175] [ 166.995603][ T5175] which lock already depends on the new lock. [ 166.995603][ T5175] [ 166.995610][ T5175] [ 166.995610][ T5175] the existing dependency chain (in reverse order) is: [ 166.995617][ T5175] [ 166.995617][ T5175] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 167.065304][ T5175] lock_acquire+0x1f8/0x5a0 [ 167.070364][ T5175] down_write+0x36/0x60 [ 167.075151][ T5175] process_measurement+0x446/0x21b0 [ 167.080890][ T5175] ima_file_mmap+0x121/0x1c0 [ 167.086023][ T5175] __se_sys_remap_file_pages+0x67a/0x8b0 [ 167.092216][ T5175] do_syscall_64+0x3b/0xb0 [ 167.097192][ T5175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.103666][ T5175] [ 167.103666][ T5175] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 167.111268][ T5175] validate_chain+0x1661/0x5950 [ 167.116657][ T5175] __lock_acquire+0x125b/0x1f80 [ 167.122046][ T5175] lock_acquire+0x1f8/0x5a0 [ 167.127084][ T5175] down_read_killable+0xc6/0xd10 [ 167.132560][ T5175] mmap_read_lock_killable+0x1d/0x60 [ 167.138382][ T5175] lock_mm_and_find_vma+0x2a7/0x2e0 [ 167.144125][ T5175] exc_page_fault+0x169/0x620 [ 167.149335][ T5175] asm_exc_page_fault+0x22/0x30 [ 167.154719][ T5175] fault_in_readable+0x1c8/0x340 [ 167.160186][ T5175] fault_in_iov_iter_readable+0xdb/0x270 [ 167.166358][ T5175] generic_perform_write+0x207/0x5e0 [ 167.172350][ T5175] __generic_file_write_iter+0x176/0x400 [ 167.178518][ T5175] generic_file_write_iter+0xab/0x310 [ 167.184423][ T5175] vfs_write+0x857/0xbc0 [ 167.189193][ T5175] ksys_write+0x19c/0x2c0 [ 167.194063][ T5175] do_syscall_64+0x3b/0xb0 [ 167.199010][ T5175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.205434][ T5175] [ 167.205434][ T5175] other info that might help us debug this: [ 167.205434][ T5175] [ 167.215679][ T5175] Possible unsafe locking scenario: [ 167.215679][ T5175] [ 167.223147][ T5175] CPU0 CPU1 [ 167.228603][ T5175] ---- ---- [ 167.233966][ T5175] lock(&sb->s_type->i_mutex_key#12); [ 167.239440][ T5175] lock(&mm->mmap_lock); [ 167.246291][ T5175] lock(&sb->s_type->i_mutex_key#12); [ 167.254279][ T5175] lock(&mm->mmap_lock); [ 167.258610][ T5175] [ 167.258610][ T5175] *** DEADLOCK *** [ 167.258610][ T5175] [ 167.266749][ T5175] 3 locks held by syz.2.237/5175: [ 167.271772][ T5175] #0: ffff88807d1ca868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 167.281015][ T5175] #1: ffff8880555c4460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 167.289941][ T5175] #2: ffff88801effbb60 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 167.301295][ T5175] [ 167.301295][ T5175] stack backtrace: [ 167.307191][ T5175] CPU: 1 PID: 5175 Comm: syz.2.237 Not tainted 6.1.132-syzkaller #0 [ 167.315185][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.325267][ T5175] Call Trace: [ 167.328551][ T5175] [ 167.331498][ T5175] dump_stack_lvl+0x1e3/0x2cb [ 167.336202][ T5175] ? nf_tcp_handle_invalid+0x647/0x647 [ 167.341688][ T5175] ? print_circular_bug+0x12b/0x1a0 [ 167.346925][ T5175] check_noncircular+0x2fa/0x3b0 [ 167.351922][ T5175] ? mark_lock+0x9a/0x340 [ 167.356296][ T5175] ? add_chain_block+0x850/0x850 [ 167.361283][ T5175] ? lockdep_lock+0x11f/0x2a0 [ 167.365978][ T5175] ? reacquire_held_locks+0x660/0x660 [ 167.371356][ T5175] ? _find_first_zero_bit+0xd0/0x100 [ 167.376653][ T5175] validate_chain+0x1661/0x5950 [ 167.381519][ T5175] ? reacquire_held_locks+0x660/0x660 [ 167.386910][ T5175] ? reacquire_held_locks+0x660/0x660 [ 167.392293][ T5175] ? mark_lock+0x9a/0x340 [ 167.396630][ T5175] ? reacquire_held_locks+0x660/0x660 [ 167.402011][ T5175] ? mark_lock+0x9a/0x340 [ 167.406347][ T5175] ? reacquire_held_locks+0x660/0x660 [ 167.411724][ T5175] ? __lock_acquire+0x125b/0x1f80 [ 167.416766][ T5175] ? mark_lock+0x9a/0x340 [ 167.421108][ T5175] __lock_acquire+0x125b/0x1f80 [ 167.425981][ T5175] lock_acquire+0x1f8/0x5a0 [ 167.430506][ T5175] ? mmap_read_lock_killable+0x1d/0x60 [ 167.435982][ T5175] ? read_lock_is_recursive+0x10/0x10 [ 167.441366][ T5175] ? __might_sleep+0xb0/0xb0 [ 167.445966][ T5175] down_read_killable+0xc6/0xd10 [ 167.450918][ T5175] ? mmap_read_lock_killable+0x1d/0x60 [ 167.456392][ T5175] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 167.462391][ T5175] ? cmp_ex_search+0x70/0x90 [ 167.466987][ T5175] ? mmap_read_lock_killable+0x1d/0x60 [ 167.472483][ T5175] ? bsearch+0x8e/0xb0 [ 167.476571][ T5175] ? down_read_interruptible+0xc40/0xc40 [ 167.482220][ T5175] ? search_extable+0xaf/0xf0 [ 167.486906][ T5175] ? trim_init_extable+0x3c0/0x3c0 [ 167.492026][ T5175] ? fault_in_readable+0x1c8/0x340 [ 167.497147][ T5175] ? __init_rwsem+0x160/0x160 [ 167.501832][ T5175] ? print_irqtrace_events+0x210/0x210 [ 167.507305][ T5175] mmap_read_lock_killable+0x1d/0x60 [ 167.512606][ T5175] lock_mm_and_find_vma+0x2a7/0x2e0 [ 167.517821][ T5175] exc_page_fault+0x169/0x620 [ 167.522511][ T5175] asm_exc_page_fault+0x22/0x30 [ 167.527372][ T5175] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 167.533097][ T5175] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 32 da bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 167.552729][ T5175] RSP: 0018:ffffc90004cff9e0 EFLAGS: 00050287 [ 167.558812][ T5175] RAX: ffffffff81cad01e RBX: 0000200000099000 RCX: 0000000000080000 [ 167.566793][ T5175] RDX: ffffc90005afa000 RSI: 00000000000106f7 RDI: 00000000000106f8 [ 167.574767][ T5175] RBP: ffffc90004cffa98 R08: ffffffff81cacfb6 R09: ffffffff8441a0e5 [ 167.582745][ T5175] R10: 0000000000000002 R11: ffff888027e7bb80 R12: 0000000000001000 [ 167.590733][ T5175] R13: dffffc0000000000 R14: 000020000009a000 R15: 1ffff9200099ff44 [ 167.598714][ T5175] ? fault_in_iov_iter_readable+0x45/0x270 [ 167.604545][ T5175] ? fault_in_readable+0x156/0x340 [ 167.609663][ T5175] ? fault_in_readable+0x1be/0x340 [ 167.614783][ T5175] ? fault_in_safe_writeable+0x250/0x250 [ 167.620426][ T5175] ? inode_to_bdi+0x65/0xd0 [ 167.624942][ T5175] fault_in_iov_iter_readable+0xdb/0x270 [ 167.630589][ T5175] generic_perform_write+0x207/0x5e0 [ 167.635884][ T5175] ? generic_file_direct_write+0x460/0x460 [ 167.641699][ T5175] ? __file_remove_privs+0x640/0x640 [ 167.646988][ T5175] ? generic_write_checks+0x15c/0x1c0 [ 167.652369][ T5175] ? clear_nonspinnable+0x60/0x60 [ 167.657432][ T5175] __generic_file_write_iter+0x176/0x400 [ 167.663076][ T5175] generic_file_write_iter+0xab/0x310 [ 167.668460][ T5175] vfs_write+0x857/0xbc0 [ 167.672713][ T5175] ? file_end_write+0x250/0x250 [ 167.677571][ T5175] ? __fget_files+0x28/0x4a0 [ 167.682166][ T5175] ? __fget_files+0x435/0x4a0 [ 167.686854][ T5175] ? __fdget_pos+0x2ba/0x360 [ 167.691448][ T5175] ? ksys_write+0x77/0x2c0 [ 167.695873][ T5175] ksys_write+0x19c/0x2c0 [ 167.700207][ T5175] ? print_irqtrace_events+0x210/0x210 [ 167.705681][ T5175] ? __ia32_sys_read+0x80/0x80 [ 167.710453][ T5175] ? syscall_enter_from_user_mode+0x2e/0x230 [ 167.716443][ T5175] ? lockdep_hardirqs_on+0x94/0x130 [ 167.721655][ T5175] ? syscall_enter_from_user_mode+0x2e/0x230 [ 167.727648][ T5175] do_syscall_64+0x3b/0xb0 [ 167.732070][ T5175] ? clear_bhb_loop+0x45/0xa0 [ 167.736759][ T5175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.742662][ T5175] RIP: 0033:0x7fa184f8d169 [ 167.747095][ T5175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.766721][ T5175] RSP: 002b:00007fa184dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.775168][ T5175] RAX: ffffffffffffffda RBX: 00007fa1851a5fa0 RCX: 00007fa184f8d169 [ 167.783151][ T5175] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 167.791127][ T5175] RBP: 00007fa18500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.799103][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.807076][ T5175] R13: 0000000000000000 R14: 00007fa1851a5fa0 R15: 00007fffbdf88c48 [ 167.815059][ T5175] [ 167.818172][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.842079][ T5173] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 167.854479][ T5173] syz.3.234: attempt to access beyond end of device [ 167.854479][ T5173] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 167.872361][ T5173] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 167.898554][ T5173] syz.3.234: attempt to access beyond end of device [ 167.898554][ T5173] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 167.921649][ T5173] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 167.952509][ T5173] hfsplus: unable to mark blocks free: error -5 [ 167.958976][ T5173] hfsplus: can't free extent [ 167.969377][ T5183] loop0: detected capacity change from 0 to 4096 [ 167.999027][ T5183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.157243][ T26] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 168.183738][ T26] usb 5-1: USB disconnect, device number 5